XPath Injection

Introduction

XPath is a language that has been designed and developed primarily to address parts of an XML document. XML databases that organize data using the XML language. XPath is very similar to SQL in its purpose and applications, an interesting result is that XPath injection attacks follow the same logic as SQL injection attacks.

How to Test

  • Refer: SQL injection Authentication Bypass

Test Example

WebGoat

REFERENCES

Last updated

Was this helpful?