Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. (dot dot) sequences.
https://exchange.xforce.ibmcloud.com/vulnerabilities/19203
http://www.securityfocus.com/bid/12419
http://www.7a69ezine.org/node/view/195
http://securitytracker.com/id?1013542