CVE-2023-53929
HIGHphpMyFAQ 3.1.12 - Authenticated CSV Injection via User Profile Export
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-53929. PoCs published by Mirabbas Ağalarov.
AI-analyzed exploit summary This exploit demonstrates a CSV injection vulnerability in phpMyFAQ v3.1.12. By manipulating a user's name field to include a malicious payload (e.g., =calc|a!z|), an attacker can trigger arbitrary command execution when an admin exports user data to CSV and opens it in a vulnerable spreadsheet application.
Description
phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names. Attackers can modify their user profile name with a payload like 'calc|a!z|' to trigger code execution when an administrator exports user data as a CSV file.
Exploits (1)
This exploit demonstrates a CSV injection vulnerability in phpMyFAQ v3.1.12. By manipulating a user's name field to include a malicious payload (e.g., =calc|a!z|), an attacker can trigger arbitrary command execution when an admin exports user data to CSV and opens it in a vulnerable spreadsheet application.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H