PowerWAF Attacks Encyclopedia

File & Path Attacks

7 documented attacks in this category. Understand the threats, learn detection techniques, and implement effective defenses.

A directory traversal attack exploits insufficient validation of user-supplied file paths to break out of the intended d...

Local File Inclusion (LFI) is a vulnerability that allows an attacker to include and read — or in some cases execute — f...

A malicious file upload attack exploits web applications that accept file uploads without properly validating the file's...

A path traversal attack (also known as directory traversal or dot-dot-slash attack) exploits insufficient input validati...

Remote File Inclusion (RFI) is a vulnerability that allows an attacker to include and execute a file hosted on a remote ...

An XML External Entity (XXE) attack exploits vulnerable XML parsers that process external entity declarations within XML...

A zip bomb (also called a decompression bomb or zip of death) is a malicious archive file designed to crash or incapacit...