An exploit where a malicious actor can access restricted directories and execute commands outside of the web server's root directory.
MITRE. (n.d.). Common Weakness Enumeration (CWE).