Retired box

Hi i need some hint ,i find exploit in the website ,but user input are sanitized ,i cant use logs to make my way getting a shell … i tried to look around if is there a bypass … unfortunately i couldnt find anything any ideas , i have spent many hours