Joomla Codextrous B2jcontact component version 2.1.17 suffers from a remote shell upload vulnerability.