lostdutchmanmarathon.org XSS vulnerability

Vulnerable URL: http://lostdutchmanmarathon.org/viewer.php?picture=images/2009racepictures/SHZ0453.JPG=1/-///'/"//--...