Portcullis Security Advisory - By manipulating the values of certain variables used during report selection it was possible enumerate the directory structure on the web server of the Bottomline Webseries Payment Application.
ea62a539bcf86d0e469c020637e6a639c321a7f55f2288b8085e3922eae483f3