EIP-2026-119663
PRE-CVEVisual Studio 2008 - XML External Entity Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-119663. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This exploit demonstrates an XML External Entity (XXE) injection vulnerability in Visual Studio 2008 Express IDE. By crafting malicious XML files with specific extensions (e.g., .snippet, .asm), an attacker can exfiltrate local files from the victim's system to a remote server.
Description
Visual Studio 2008 - XML External Entity Injection
Exploits (1)
This exploit demonstrates an XML External Entity (XXE) injection vulnerability in Visual Studio 2008 Express IDE. By crafting malicious XML files with specific extensions (e.g., .snippet, .asm), an attacker can exfiltrate local files from the victim's system to a remote server.