Tridcomm versions 1.3 and below suffer from both upload and download directory traversal attacks. Exploitation provided.