Collected research

SDRF / Hitting Bitrix with a Hammer: FormCalc authenticated response reading

Молотком по Битриксу: Выявляем 0day-уязвимости популярной CMS

oxod · Xakep

A Bitrix support-ticket PDF, opened on the application’s origin, uses FormCalc GET and POST calls to read an administrator’s CSRF token and invoke the PHP console. The article also chains BBCode attribute injection or profile-field XSS with unfiltered event handlers to bypass the WAF and submit authenticated commands.

Record

Document

Молотком по Битриксу: Выявляем 0day-уязвимости популярной CMS

Researcher

oxod

Published by

Xakep

Topic

Other

In the archive

• Collected in the 2010 research round

Related sources

• SDRF vulnerability in web-applications and browsers (Whitepaper) Whitepaper

Tags

• pdf
• csrf
• xss
• file-upload
• waf-bypass
• php
• attack-chain
• rce
• owasp-a01-2021
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of oxod, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 September 2026.