Drupal Module Drag & Drop Gallery 6.x-1.5 - 'upload.php' Arbitrary File Upload

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

This PoC is retained in the catalog but is not currently linked to a vulnerability.