Directory Traversal (directory traverse)

Example 1, Lenovo JIAZHIPC Station directory traversal, can read / download arbitrary files

For example, through the path variable, read The contents of the file below /etc/

Example 2, Lenovo report Station directory traversal, can read / download arbitrary files

For example, by using the variable fileName, download the /etc/passwd file

Submitted by:Filename=. /.. /.. /.. /.. /.. /.. /.. /etc/passwd

Download,/root/.bash_history file

Submit:.. /.. /.. /.. /.. /.. /.. /.. /root/.bash_history

Directory Traversal (directory traverse)