What is path traversal?

What is a mass-assignment attack?