Injections in File Name

Examples:

• file$(whoami).jpg
• filewhoami.jpg
• file.jpg||whoami

Windows Specific Attacks

Use reserved names (CON, COM1, LPT1, NUL) will cause an error.

Advanced

See the AVI upload vuln leading to XXE in ffmpeg.