CVE-2021-2471

This repository contains functional exploit code demonstrating XXE vulnerabilities in H2 (CVE-2021-23463) and MySQL (CVE-2021-2471) JDBC drivers via SQLXML parsing. The PoC triggers XXE by fetching SQLXML data and converting it to a DOMSource, which processes external entities.

This PoC demonstrates an XXE (XML External Entity) vulnerability in MySQL's SQLXML handling. It crafts a malicious XML payload with an external entity reference and triggers the vulnerability via JDBC connection.

This repository contains a functional PoC for CVE-2021-2471, an XXE vulnerability in MySQL Connector/J. The exploit demonstrates how a malicious XML payload stored in a database can trigger an external entity resolution, leading to SSRF or information disclosure.

This repository contains a functional PoC for CVE-2021-2471, an XXE vulnerability in MySQL Connector/J. The exploit demonstrates how malicious XML input can be processed via the `setString()` function, leading to unauthorized data access or DoS.