Where you should disclose your vulnerabilities. Go read
RFPolicy if you want to do responsible disclosure, and go here for when all else fails.
Re: XPath Injection on PHP?
Date: January 06, 2011 03:13PM
Here is a walkthrough for a xpath injection challenge
http://www.rs-labs.com/papers/i64-reto_IV-solve.txt
(hint: google translate)
there was also a similar challenge at rootedCON ctf, writeups here:
http://j.mp/eMwIbR
that should be all you need to learn xpath injection attacks.
(wrong forum btw ;))
