Exploiting a path traversal vulnerability with NSE