rapid7/metasploit-framework — pull request #420 by wchen-r7 (2012-05-26 08:01:58+00:00)
Title: Add OSVDB-70776 - QuickShare File Share

This module exploits a vulnerability found in QuickShare File Share's FTP service. By supplying "../" in the file path, it is possible to trigger a directory traversal flaw, allowing the attacker to read a file outside the
virtual directory. By default, the "Writable" option is enabled during account creation, therefore this makes it possible to create a file at an arbitrary location, which leads to remote code execution.