Joomla 1.6.x Administrator PHP Code Execution

This Metasploit module can be used to gain a remote shell to a Joomla! 1.6.x install when administrator credentials are known. This is achieved by uploading a malicious component which is used to execute the selected payload.

Source: Joomla 1.6.x Administrator PHP Code Execution