CVE-2007-3158: download_script.asp in ASP Folder Gallery allows remote attackers to read arbitrary files via a filename in...

Security readout for executives and security teams

CVE-2007-3158 is an arbitrary file read issue in ASP Folder Gallery. If a vulnerable download script is exposed, a remote attacker may be able to retrieve files the web server can access. The source bundle does not identify affected versions, a vendor patch, or active exploitation. Likely limited to legacy ASP Folder Gallery deployments with download_script.asp reachable from the network. The supplied sources do not provide affected versions or CPEs, so exposure depends on asset inventory, application discovery, and whether this script remains deployed. Prioritize discovery over emergency response. This is old software with incomplete severity data and no supplied evidence of active exploitation, but exposed arbitrary file read can disclose credentials, configuration, or sensitive content. Mitigation focus: Check vendor or archived project guidance for any official fix.; Remove or disable download_script.asp if the feature is unnecessary.; Restrict access to the script behind authentication or network controls..

Prepared

Jun 29, 2026, 05:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.