EUVD-2007-5710

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

Korean GHBoard FlashUpload Component - download.jsp?name Arbitrary File Access

Korean GHBoard FlashUpload Component - download.jsp?name Arbitrary File Access...

Korean GHBoard FlashUpload Component - 'download.jsp?name' Arbitrary File Access

source: https://www.securityfocus.com/bid/26182/info GHBoard is prone to multiple vulnerabilities that let attackers upload and download arbitrary files and execute arbitrary code within the context of the webserver process...