CVE-2010-4153

CrossFTP Pro 1.65a (and earlier) is affected by a directory traversal vulnerability where a remote FTP server can craft a filename containing traversal sequences (e.g., ........) to write files to arbitrary locations on the target system. The vulnerability arises from insufficient sanitization of...