EasyGallery Cross-Site Scripting

[botan () linuxmail org]

Website : www.wingnut.net.ms
Author : Botan
Credits : B3g0k,Nistiman,flot,Netqurd
Original Advisory : 

http://advisory.patriotichackers.com/index.php?itemid=5

Description : "EasyGallery is a simple web-photogallery with a maximum of user-friendlyness. All you have to do is to 
upload your photos and the EasyGallery files onto your webspace"

XSS code :

http://www.site.com/[path]/EasyGallery.php?ordner=XSS