CVE-2012-4472

The CVE-2012-4472 issue affects the Drupal Drag & Drop Gallery module (6.x-1.5 and earlier). The vulnerability resides in upload.php, where unrestricted file uploads allow an attacker to upload a PHP-executable file (with an executable extension followed by a safe extension) and then access it vi...