This proof of concept code shows how administrator functionality can be abused in Joomla to upload a shell.