diff --git a/SECURITY.md b/SECURITY.md
index 86f178a..d3ee590 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -44,7 +44,7 @@ if (!is_website_url($url)) {
 
 ```bash
 # Attacker.
-$ curl https://www.example.com/upload_photo.php --data "photo=@/etc/password"
+$ curl https://www.example.com/upload_photo.php --data "photo=@/etc/passwd"
 ```
 
 ```php