CVE-2007-5738 The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload a...
MediumCVSS 6.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ghlab korean ghboard | All versions | No fix listed |
References
- 38920 vdb-entry
- 3325 third-party-advisory
- 20071023 Korean GHBoard Multiple Vulnerabilities by Xcross87 mailing-list
- 26182 exploit vdb-entry