CVE-2017-6100 (tcpdf)

tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.

Source: CVE-2017-6100 (tcpdf)