ethicalhacker.net — XPath is a query language for XML documents, much like SQL is a query language for databases. And like SQL, XPath also had the potential for injection issues if queries are not properly sanitized. This intro article take you through a couple examples with lots additional resource info.