Owasp path traversal cheat sheet

An attacker could exploit this by subbing the value of a cookie and sending the following HTTP GET /index.php HTTP/1.0 Cookie: SKIN=.. /.. /.. /etc/passwd This value would be added to the path, so the web server to execute the following activate(s) call to climb into the /etc directory and upload the ................
................