https://pentesterarchive.github.io/posts/XSSAndMysqlFile/
Write-up / XSS and MySQL file Vulnhub. - PentesterArchive