Skip to content

Latest commit

 

History

History
12 lines (6 loc) · 350 Bytes

File metadata and controls

12 lines (6 loc) · 350 Bytes

SecurityExplained S-25: Vulnerable Code Snippet - 13

Vulnerable Code:

Vulnerable Code

Solution:

The code is vulnerable remote code execution vulnerability via Path Traversal. Payload like this works: ?dir=

.

.

/

.

.

/

.

./user/profile.png

Code Credits: Octagon Networks