+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: XML External Entity Injection and XML Injection (/showthread.php?tid=3064343)
XML External Entity Injection and XML Injection - Bacardi - Dec 2, 2012
I got a phish email today and decided to scan the host with acunetix. This alert came up.
XML External Entity Injection And XML Injection
First time I've encountered this and so far it's pretty nice. I can access C:\Windows folder of the hosting company! Also the hosts file.
Although, I can't access C:\ or Program Files.
My question is: What can I do with this?
* - RyanC - Dec 2, 2012
(Dec 2, 2012 05:12 AM)Bacardi Wrote: I got a phish email today and decided to scan the host with acunetix. This alert came up.
XML External Entity Injection And XML Injection
First time I've encountered this and so far it's pretty nice. I can access C:\Windows folder of the hosting company! Also the hosts file.
Although, I can't access C:\ or Program Files.
My question is: What can I do with this?
You can read their files, and scan their internal network.