CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.Referenceshttps://yoursecuritybores.me/coreftp-vulnerabilities/http://www.coreftp.com/forums/viewtopic.php?f=15&t=4022509