Description
The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html.
References
- 26182 vdb-entry
- 3325 third-party-advisory
- 20071023 Korean GHBoard Multiple Vulnerabilities by Xcross87 mailing-list
- 38920 vdb-entry