SecurityExplained S-25: Vulnerable Code Snippet - 13

Vulnerable Code:

Solution:

The code is vulnerable remote code execution vulnerability via Path Traversal. Payload like this works: ?dir=

.

.

/

.

.

/

.

./user/profile.png

Code Credits: Octagon Networks

Follow Twitter Thread