Local File inclusion + File Upload = Remote Code execution

Original writeup (http://blog.init-labs.org/2015/09/07/mmactf-web300-challenge-writeup/).