Portcullis Security Advisory – The Bottomline Webseries Payment Application system embeds full paths to files on the underlying filesystem in various HTTP variables. reference directories and files on the web server.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35664/PSA05-005.txt
Source: https://packetstormsecurity.com/files/35664/PSA05-005.txt.html