Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature.