Questions tagged [path-injection]
28 questions
15
votes
2 answers
Path traversal filter bypass techniques?
I have a Linux-based embedded system with web-interface for management purposes. According to one security paper, this web-server has rudimentary filter against directory traversal attacks in URL parameters. So in order to bypass the "../" filter,…
Martin
- 411
- 2
- 8
- 16
3
votes
1 answer
How to protect the code of Windows applications against path traversal?
I'm writing a simple HTTP server in Lua and while I can easily find resources on how to secure against Unix directory traversal, I already found some caveats in the Windows version. While I'm already looking for C:\ at the beginning (C being "any…
d33tah
- 6,544
- 8
- 40
- 61
-3
votes
2 answers
Are path traversal attacks possible if attacker is not authenticated?
Are path traversal attacks possible if attacker is not authenticated in web-application?
Martin
- 411
- 2
- 8
- 16