How to hack a car on HTB?

Question

Burglary protection

I recently started studying cyber security. Decided to practice driving in Hack The Box (AI 10.10.10.163). As expected, I scanned the ports, found http at 80, and began to explore the site. Everything seems to be clean, the site is written in php, but you can upload files to /ai.php. Naturally, I uploaded a simple php shell (exploit.php). With the help of dirb, I found out that there is a /uploads/ directory (Probably files are saved there), but it throws me out with 403, and when I try directly (/uploads/exploit.php) it writes 404. Please help me bend this machine