ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp.
CWE-22