The uploads_import directory is publicly accessible, you should secure it before importing files. By default, the directory contains an .htaccess file which should prevent public access on Apache, it seems you are not using Apache or for some reason the .htaccess file doesn't work in your environment.