[DROP TABLE users]

I've read in a couple of places that xpath is more dangerous than SQLi. I was wondering what makes it more dangerous ? I've read a couple of tutorials here in HF about how to do it using extractvalue() and UpdateXML() but I never found the reason of it being more dangerous?

[Aakash_Choudhary]

Best :->

http://securityidiots.com/Web-Pentest/XPATH-Injection

[HiddenEyE]

it is almost same with sqli injection just that it equally be used on form or search box like xss

[Kashmiri Hunter]

SQLi Is Main Vulnerability !
and XPATH is an Injection Type Used When ERROR is ON (Error Based Injection)....