EUVD-2007-5710

Malware in sbrugna...

EUVD-2007-5709

Malware in sbrugna...

EUVD-2007-5708

Malware in sbrugna...

Korean GHBoard FlashUpload Component download.jsp name Parameter Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/26182/info GHBoard is prone to multiple vulnerabilities that let attackers upload and download arbitrary files and execute arbitrary code within the context of the webserver process...

Korean GHBoard component/upload.jsp Unspecified Arbitrary File Upload

No description provided by source. source: http://www.securityfocus.com/bid/26182/info GHBoard is prone to multiple vulnerabilities that let attackers upload and download arbitrary files and execute arbitrary code within the context of the webserver process...

Directory traversal

Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

CVE-2007-5737

Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via unspecified vectors, probably involving a direct request...

CVE-2007-5738

The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html...

CVE-2007-5739

Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

Design/Logic Flaw

The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html...

CVE-2007-5738

The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html...

CVE-2007-5739

CVE-2007-5739 is a directory traversal vulnerability in the FlashUpload component’s file download.jsp (Korean GHBoard). The vulnerability allows remote attackers to read arbitrary server files by supplying a ".." sequence in the name parameter of the request. Affected software is the Korean GHBoa...

CVE-2007-5737

Technical details about CVE-2007-5737 are not publicly provided in the supplied documents. The description notes an unrestricted file upload in Korean GHBoard, but no affected versions, vectors, or fixes are given here. Monitor for updates.

CVE-2007-5739

Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

CVE-2007-5737

Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via unspecified vectors, probably involving a direct request...

CVE-2007-5738

The CVE-2007-5738 entry concerns the FlashUpload component in Korean GHBoard. A client-side protection mechanism intended to block dangerous file extensions can be bypassed, enabling a remote attacker to upload arbitrary files through a modified copy of component/flashupload/upload.html. This is ...

CVE-2007-5737: Improper Input Validation

Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via unspecified vectors, probably involving a direct request...

CVE-2007-5739: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

CVE-2007-5738: Improper Input Validation

The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html...

Korean GHBoard - 'Component/upload.jsp' Arbitrary File Upload

source: https://www.securityfocus.com/bid/26182/info GHBoard is prone to multiple vulnerabilities that let attackers upload and download arbitrary files and execute arbitrary code within the context of the webserver process...