This attack utilizes XQuery to probe and attack server systems; in a
						similar manner that SQL Injection allows an attacker to exploit SQL calls to
						RDBMS, XQuery Injection uses improperly validated data that is passed to
						XQuery commands to traverse and execute commands that the XQuery routines
						have access to. XQuery injection can be used to enumerate elements on the
						victim's environment, inject commands to the local host, or execute queries
						to remote files and data sources.