STG Security Advisory SSA-20030701-03: ezTrans Server, the popular portal software used throughout Korea, lacks input validation in the file download module. Due to this, a remote attacker can download any file on the system that the webserver uid can access.
d492993f68980b4e668ff2b3131e085ae25dd8e90d2b29a666435ba1b92fbcf3