CVE-2007-5738: Ghlab Korean Ghboard

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html.

Affected products

• Ghlab Korean Ghboard: any version

Published 2007-10-30. Last modified 2026-06-16.