http://www.kitploit.com/2018/10/jqshell-weaponized-version-of-cve-2018.html
JQShell - A Weaponized Version Of CVE-2018-9206 (Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0)