2 CVEs of this weakness class.
.NET Framework Information Disclosure Vulnerability
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.