Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/19258
http://securitytracker.com/id?1013106