By tricking a web server into exposing otherwise restricted information, attackers can gain a powerful tool to compromise a system and cause significant damage. Directory traversal is a common method used to achieve this. An attempt to navigate outside the areas of the filesystem reserved for a particular website can lead to data theft and arbitrary code execution.
