ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.
ectouch ectouch 2.0