> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.100/code-analysis.md).

# Code Analysis

We can find an vulnerability in a php file

<figure><img src="/files/3VruGLnicPgP5OkOWPVr" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/yfi2cRlpUs1HRcv9Qxay" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/0ON9dPd1UXfzjCjaRFbq" alt=""><figcaption></figcaption></figure>

Possible Vulnerable File upload exploit. Improper handling with the splitting of the image name