CVE-2013-3684 - NextGEN Gallery 1.9.12 - Arbitrary File Upload