EIP-2026-119661

This exploit demonstrates an XML External Entity (XXE) vulnerability in Microsoft Windows Media Center 2002, allowing remote information disclosure by bypassing the Mark-of-the-Web (MotW) security feature. The PoC includes a crafted .mcl file and a malicious DTD file hosted on an attacker-controlled server to exfiltrate local file contents.