Upload shell on Vbulletin 4.2.0 patch 2 AdminCP

Greetings Hackforums members how are you doing?

I got into a Vbulletin 4.2.0 patch 2 Admin control panel but I don't know where to upload my PHP shell. There's not any Plugin upload in XML. The upload links are custom language XML where i couldn't upload my shell in XML format and avatar picture upload where i couldn't upload my shell in .jpg nor .png format.

Any thoughts please? 😭

Many thanks for your time,
Kind regards

Did you try this exploit :->

https://www.exploit-db.com/exploits/37815/

Thank you, i haven't tested it. However given the fact that i got the admin password and got into the admin panel isn't there any way to upload a shell from there? rather than looking for more vulnerabilities?. Is VB Admin Panel unexploitable anymore?