Later archive addition

SDRF / Hitting Bitrix with a Hammer: FormCalc authenticated response reading

oxod · Xakep

A Bitrix support-ticket PDF, opened on the application’s origin, uses FormCalc GET and POST calls to read an administrator’s CSRF token and invoke the PHP console. The article also chains BBCode attribute injection or profile-field XSS with unfiltered event handlers to bypass the WAF and submit authenticated commands.

Record

Researcher

oxod

Published by

Xakep

In the archive

• Added to the 2010 archive after the original list was published

Related sources

• SDRF whitepaper

Tags

• pdf
• csrf
• xss
• file-upload
• waf-bypass
• php
• attack-chain
• rce
• owasp-a01-2021
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of oxod, first published at the original source. Preserved copies are kept so the citation survives its host.