An XML External Entity (XXE) attack is a type of computer security vulnerability typically found in Web applications. During parsing of the XML document, the parser will expand these links and include the content of the URI in the returned XML document.
Similarly one may ask, what is an XML injection?
XML Injection is an attack technique used to manipulate or compromise the logic of an XML application or service. The injection of unintended XML content and/or structures into an XML message can alter the intend logic of the application.
What are injected frames?
A frame injection attack is an attack on Internet Explorer 5, Internet Explorer 6 and Internet Explorer 7 to load arbitrary code in the browser. This other type of frame injection affects all browsers and scripts that do not validate untrusted input.
What is a Xpath injection?
XPath Injection is an attack technique used to exploit applications that construct XPath (XML Path Language) queries from user-supplied input to query or navigate XML documents.