Joomla BreezingForms component version 1.8.x suffers from a remote shell upload vulnerability.