XPath Injection

An attack that injects malicious XPath expressions into XML navigation queries. XPath injection can bypass authentication or extract sensitive data from XML documents. It is analogous to SQL injection but targets XML databases and configuration files.