A directory traversal within the ??ftpservlet?? of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ??uploadtemp?? directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal??s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.
