XXE: XML eXternal Entity Injection vulnerabilities