Successful exploitation with arbitrary file extensions requires that "magic_quotes_gpc" is disabled.
Related posts