A penetration tester discovers that a web application uses unsanitized user input to dynamically generate file paths. The tester identifies that the application...