Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code read arbitrary files and upload arbitrary files via a ... (triple dot) in (1) the URL on port 608 and (2) the argument to upload.exe.