Wing FTP Server versions 4.3.8 and below suffer from an authenticated remote code execution vulnerability.