EIP-2026-119660

This exploit demonstrates an XML External Entity (XXE) injection vulnerability in Microsoft Visual Basic 2010 Express. It leverages a crafted XML file and DTD to exfiltrate the contents of `C:\Windows\win.ini` via an HTTP request to a controlled server.