In this video I am demonstrating how to exploit the file upload vulnarabilty in DVWA on security level medium. http://www.dvwa.co.uk/
Right-click 'Download' and select 'Save Link As' if the file opens in a new tab.