EIP-2026-102355

This exploit demonstrates an XML External Entity (XXE) injection vulnerability in Apache OFBiz versions prior to 16.11.04, allowing arbitrary file disclosure. The script sends a crafted XML payload to the target's XML-RPC endpoint to read files or crawl directories.