EF Commander versions 3.54 and below are vulnerable to various buffer overflows that can allow for remote arbitrary code execution.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31491/efcommander.txt
Source: https://packetstormsecurity.com/files/31491/efcommander.txt.html