Which of the following attacks allows an attacker to access restricted directories, including application
source code, configuration and critical system files, and to execute commands outside of the web

server’s root directory?

A.
Unvalidated input

B.
Parameter/form tampering

C.
Directory traversal

D.
Security misconfiguration