Theory
File upload vulnerabilities are when a web server allows users to upload files to its filesystem without sufficient validation. We may leverage this vulnerability to upload executable code (i.e. php, aspx, jsp ...) and execute it by accessing it.
Practice
Resources