1-2-All versions 4.5x through 4.53.13 use blacklisting instead of whitelisting for file extensions allowing for malicious file uploads.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/56449/12all-upload.txt
Source: https://packetstormsecurity.com/files/56449/12all-upload.txt.html