The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-10-30T23:00:00
Updated: 2024-08-07T15:39:13.693Z
Reserved: 2007-10-30T00:00:00
Link: CVE-2007-5738
Vulnrichment
No data.
NVD
Status : Modified
Published: 2007-10-30T23:46:00.000
Modified: 2018-10-15T21:46:12.253
Link: CVE-2007-5738
Redhat
No data.