Authenticated file overwrite via unresolved traversal

Path traversal in EyouCMS 1.51 allows remote authenticated users to write permitted file types outside the template directory. FilemanagerLogic.php's editFile method checks only that activepath begins with the configured template path, then appends it and filename to baseDir and opens the unresolved result for writing. An authenticated session with file-manager access can submit traversal segments and overwrite a writable file outside the intended template tree; the published proof of concept demonstrates an HTML-file write.