Skip to main content
Information Security

All Questions

Ask Question
Tagged with
2 questions
NewestActiveBountiedUnanswered
3votes
1answer
1kviews

Java org.xmlpull.v1.XmlPullParser and XML External Entity (XXE) Processing Attacks

I'm evaluating the security of an Android application and the application is using the XmlPullParser included with Android. I'm having some difficulty getting any common attacks to work, but I want ...
Ben Holland's user avatar
Ben Holland
  • 505
7votes
1answer
14kviews

How can XML Injection be exploited , need example?

So I found this explanation for a vulnerability on some cms : The XML parser at /WorkArea/Blogs/xmlrpc.aspx is vulnerable to XML external entity attacks which can be used to Scan behind perimeter ...
Daniel's user avatar
Daniel
  • 1,452

close