nerdexam
EC-Council

312-49 · Question #15

Attackers can manipulate variables that reference files with "dot-dot-slash (./)" sequences and their variations such as Identify the attack referred.

The correct answer is A. Directory traversal. This describes a Directory Traversal attack (also called Path Traversal). Attackers insert sequences like '../' (dot-dot-slash) into file path parameters to navigate outside the intended web root directory and access restricted files (e.g., /etc/passwd on Linux). Variations…

Submitted by mateo_ar· Apr 18, 2026Computer Forensics in Today's World

Question

Attackers can manipulate variables that reference files with "dot-dot-slash (./)" sequences and their variations such as Identify the attack referred.

Options

  • ADirectory traversal
  • BSQL Injection
  • CXSS attack
  • DFile injection

How the community answered

(29 responses)
  • A
    90% (26)
  • B
    7% (2)
  • D
    3% (1)

Explanation

This describes a Directory Traversal attack (also called Path Traversal). Attackers insert sequences like '../' (dot-dot-slash) into file path parameters to navigate outside the intended web root directory and access restricted files (e.g., /etc/passwd on Linux). Variations include URL-encoded forms like %2e%2e%2f. SQL Injection targets database queries, XSS injects client-side scripts, and File Injection refers to uploading malicious files - none of these involve path manipulation using dot-dot-slash sequences.

Topics

#Directory Traversal#Path Traversal#Web Vulnerabilities#Attack Techniques

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice