Many times FTP is configured to allow anyone to log in and have access to the whole hard drive. Attempt to log in and check to see what files are accessible. By doing a "cd ..", it may allow people to go higher in the file system that what is intended