PHP Environment XML External Entity Injection Vulnerability (XXE)
Environment introduction:
- PHP 7.0.30
- libxml 2.8.0
After libxml2.9.0, external entities are not parsed by default, leading to the gradual disappearance of XXE vulnerabilities. In order to demonstrate the XXE vulnerability in the PHP environment, this example compiles libxml2.8.0 into PHP. PHP version does not affect XXE exploitation.