The wp-file-upload plugin prior to 2.5.0 for WordPress has insufficient restrictions on upload of .php files.
iptanus wordpress file upload