2 ms·

I imagine it's supposed to get onto the server by an exploited vulnerable image upload plugin

• slow_typist 1y ago
  Maybe I don’t understand the scenario fully, but under your assumption there is no need to inject the malicious webshell later.