Server-Side template injection, read out flag.txt.

Original writeup (https://www.nevivur.net/writeups/2019/02/tamuctf-19/#science).