Unrated severityNVD Advisory· Published Nov 30, 2012· Updated Jun 16, 2026
CVE-2012-4472
CVE-2012-4472
Description
Unrestricted file upload vulnerability in upload.php in the Drag & Drop Gallery module 6.x-1.5 and earlier for Drupal allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the directory specified by the filedir parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:david_alkire:drag_\&_drop_gallery:*:*:*:*:*:*:*:*Range: <=6.x-1.5
- Range: <=6.x-1.5
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.