Unrestricted Upload of File with Dangerous Type
FrozenNode Laravel-Administrator allows unrestricted file upload (and consequently Remote Code Execution) via admin/tips_image/image/file_upload image upload with PHP content within a GIF image that has the .php extension.