Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-3158. PoCs published by freeprotect.net.
AI-analyzed exploit summary The provided code is a writeup describing an arbitrary file download vulnerability in ASP Folder Gallery. It explains the vulnerability and provides an example URL to exploit it, but does not include functional exploit code.
Description
download_script.asp in ASP Folder Gallery allows remote attackers to read arbitrary files via a filename in the file parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by freeprotect.net · textwebappsasp
https://www.exploit-db.com/exploits/30159
The provided code is a writeup describing an arbitrary file download vulnerability in ASP Folder Gallery. It explains the vulnerability and provides an example URL to exploit it, but does not include functional exploit code.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target:
ASP Folder Gallery (version not specified)
No auth needed
Prerequisites:
Access to the vulnerable web application
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
References (5)
Core 5
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24345
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/470667/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34906
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/2793
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/38372
Scores
EPSS
0.0227
EPSS Percentile
81.3%
Details
Status
published
Products (1)
tenyearsgone/asp_folder_gallery
Published
Jun 11, 2007
Tracked Since
Feb 18, 2026