/_status?format=xml Oh exploitable!