WordPress Plugin Fancy Gallery 1.2.4 - Arbitrary File Upload

# Description : Wordpress Plugins - Fancy Gallery Arbitrary File Upload Vulnerability
# Version : 1.2.4
# link : http://codecanyon.net/item/fancy-gallery-wordpress-plugin/400535
# Price : 18$
# Date : 22-06-2012
# Google Dork : inurl:/wp-content/plugins/radykal-fancy-gallery/
# Site : 1337day.com Inj3ct0r Exploit Database
# Author : Sammy FORGIT - sam at opensyscom dot fr - http://www.opensyscom.fr
##################################################


CSRF HERE

isi Postname = file[]


ext file : lo.php.gif , png , jpg 


Access : http://www.exemple.com/wordpress/wp-content/plugins/radykal-fancy-gallery/admin/file.png