In what type of attack does an intruder manipulate a URL in such a way that the Web server executes or reveals the contents of a file anywhere on the server, including those lying outside the document root directory?
cross-site scripting
command injection
path traversal attacks
SQL injection