EZ Server is vulnerable to a directory traversal attack, which allows an attacker to access sensitive information from the server by sending a specially crafted HTTP request containing directory traversal sequences. For example, an attacker can send a request to the server such as http://[target]/../../winnt/win.ini to access the win.ini file from the Windows directory.