Local File Inclusion (LFI) Vulnerability

[ASHISH27091987]

We got some vulnerabilities on apache server in vulnerability assessment. Can someone please let us know the settings we need to do to avoid these :-

1) Directory Inclusion : User can traverse from one directory to another by using (

https://Server.fqdn/DIR1/..\..\DIR2\login.aspx) through browser . We want to avoid this.


Regards,
Ashish Vashistha

[ASHISH27091987]

Can someone please help on this?

[JJ_Tagy]

The easiest settings are to not configure XAMPP to be exposed to the Internet. It is a development package.