Arbitrary File Write

Goomph is vulnerable to arbitrary file writes. The vulnerability exists in unzip function of ZipMisc.java due to insufficient checks when unzipping zip files which allows an attacker to write files in arbitrary locations in the file system.