EIP-2026-107459

This exploit demonstrates an XXE (XML External Entity) injection vulnerability in the Google AdWords API client libraries (PHP, Java, .NET). The PoC shows how an attacker can perform a MitM attack to inject malicious XML, leading to arbitrary file disclosure or command execution via the 'expect' PHP module.