<?php
$xml = '<?xml version="1.0"?>
<!DOCTYPE results [
<!ENTITY harmless SYSTEM
"php://filter/read=convert.base64-encode/resource=/var/www/config.ini"
>
]>
<results>
<result>&harmless;</result>
</results>';
$doc = new DOMDocument;
$doc->loadXML($xml);
echo $doc->saveXML();
- Output for 5.4.2 - 5.4.45, 5.5.24 - 5.5.35, 5.6.7 - 5.6.28, 7.0.0 - 7.0.20, 7.1.0 - 7.1.33, 7.2.0 - 7.2.33, 7.3.0 - 7.3.33, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30, 8.1.0 - 8.1.28, 8.2.0 - 8.2.18, 8.3.0 - 8.3.6
- <?xml version="1.0"?>
<!DOCTYPE results [
<!ENTITY harmless SYSTEM "php://filter/read=convert.base64-encode/resource=/var/www/config.ini">
]>
<results>
<result>&harmless;</result>
</results>
preferences:
227.13 ms | 404 KiB | 254 Q