Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the…

The correct answer is C. Directory traversal. Directory traversal (also called path traversal) is an attack that exploits insufficient input validation on file path references. By injecting sequences such as ../ (dot-dot-slash), an attacker can navigate outside the web server's intended root directory to access restricted…

Submitted by layla.eg· Apr 18, 2026Disk Forensics

Question

Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the web server's root directory?

Options

AParameter/form tampering
BUnvalidated input
CDirectory traversal
DSecurity misconfiguration

How the community answered

(42 responses)

B
2% (1)
C
93% (39)
D
5% (2)

Explanation

Directory traversal (also called path traversal) is an attack that exploits insufficient input validation on file path references. By injecting sequences such as ../ (dot-dot-slash), an attacker can navigate outside the web server's intended root directory to access restricted files - configuration files, source code, /etc/passwd, etc. - and potentially execute commands. Parameter/form tampering involves modifying web form data. Unvalidated input is a broad vulnerability category. Security misconfiguration refers to improper server or application configuration.

Topics

#Directory Traversal#Web Application Attacks#Vulnerability#Information Disclosure

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice