Local file injection
If target system allows dynamic file input without validation, you may inject a path to retrieve or execute any local resource, even
those outside the intended scope.
They asked for a path. You delivered a weapon.
If target system allows dynamic file input without validation, you may inject a path to retrieve or execute any local resource, even
those outside the intended scope.
They asked for a path. You delivered a weapon.
Card Comments 0
No comments yet. Be the first to comment!