PHP Upload Center is susceptible to directory traversal attacks via the filename parameter in index.php.