This PHP project lists several vulnerable way to upload file. It can be used to sensibilise programmers (or just have fun hacking).
Please quote this URL ( https://github.com/HugoDelval/vulnerable-upload ) if you use this project as a ressource.