If the server supports file uploads (like profile avatar), you can upload an image with embedded PHP code in it.