This is a brief whitepaper that covers XPATH injection attacks and use cases.
You can download it from the following link: https://packetstormsecurity.com/files/download/123483/xpath-injection.pdf
Source: https://packetstormsecurity.com/files/123483/XPATH-Injection.html