Sounds like your server has mod_security installed with a rule that blocks the request when it contains move_uploaded_file.