Bypass fix in https://hackerone.com/reports/151516 report.

Disclosed: 2016-10-12 04:04:29 By 0x01alka To iandunn-projects
Low
Vulnerability Details
Hi. **Steps to reproduce:** 1. The same in previous https://hackerone.com/reports/151516 report. 2. But payload to bypass your fix would be like this: `;=cmd|' /C calc'!A0` **Solution:** 1. Add `;` in your escape function esc_csv() on line 2858 of camptix.php **References:** 1. https://www.owasp.org/index.php/CSV_Excel_Macro_Injection Tested on Windows 7 64 + Microsoft Office Exel 2003(think will work and on later versions) Regards.
Actions
View on HackerOne
Report Stats
  • Report ID: 160520
  • State: Closed
  • Substate: resolved
  • Upvotes: 4
Share this report