at this point, the attacker has already owned the database and found an exploit that allows arbitrary shell execution on the host. i feel like the title is a li

at this point, the attacker has already owned the database and found an exploit that allows arbitrary shell execution on the host. i feel like the title is a little bit click-baity, because the attacker could have just hosted their executable payload on any of a thousand shady file hosting sites without needing to hide it in an image.