Pandora Authentication Bypass and File Upload Exec