SourceCodester Online Eyewear Shop Directory Traversal Vulnerability

A directory traversal vulnerability has been identified in SourceCodester Online Eyewear Shop version 1.0. The issue resides in an unknown function of the file '/oews/admin/', where multiple sub-directories are affected. This vulnerability allows remote attackers to traverse directories and access arbitrary files, potentially leading to the exposure of sensitive server information.

Impact

Exploitation of this vulnerability allows for unauthorized directory traversal, enabling access to restricted files and sensitive server information.

Reproduction

The vulnerability can be reproduced by sending a GET request to '/oews/admin/inc/', '/oews/admin/inquiries', or '/oews/admin/system_info'. This can be done using a web browser or a tool like cURL, without any special privileges or authentication.