{ Relative Path Overwrite demo } by Creased

An XSS exploitation demo can be found here.

Thumbnail