What was supposed to be a file disclosure turned into a remote code exécution.