Rating:
http://gallery.irc.ya1.ru/uploads/1356673699.jpg sql injection in exif of this image
I don't remember