Joomla Password Reset vulnerability

Joomla Password Reset vulnerability : Explain with Live demo : 

website  : http://miit.unikl.edu.my/ 

The tricks is like this:

1. Go to http://miit.unikl.edu.my/index.php?option=

com_user&view=reset&layout=confirm
then you will be prompt for a token in which the token is suppose 

already sent to your email,

2. Now, put a single quote ' into field text box "token" and Click OK.
The sql query then will be looks like this :

Shell Uploading in Joomla

Recently i Got some pepole's message on My Facebook id, they were unable to upload shell in joomla, so i thought i should make a tutorial of shell uploading in joomla after gaining admin acess

There are many ways to upload shell in joomla, i'll tell you a easy one !! 

so lets start.. 

1- Login to joomla adminstrator 

2- Now Go To Media Manager