Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view