PROPFIND方式提交xml结构请求

 

来自 <https://shuimugan.com/bug/view?bug_no=203048>

 

 

https://shuimugan.com/bug/view?bug_no=203048

 

 

 

 

GET方式的XXE

https://shuimugan.com/bug/view?bug_no=210560

 

 

 

无任何参数的XXE

 

 

 

 

?wsdl接口泄露XXE

 

来自 <https://shuimugan.com/bug/view?bug_no=188569>

 

 

驴妈妈旅游网某业务系统存在XXE漏洞

 

来自 <https://shuimugan.com/bug/view?bug_no=188569>