Automated Logic WebCTRL version 6.1 suffers from path traversal and arbitrary file write vulnerabilities.