Rating:

Please, do not write just a link to original writeup here.

Original writeup (https://www.asafety.fr/vuln-exploit-poc/rce/ctf-ndh-2018-quals-write-up-web-pixeditor/).