Description
ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fields that execute on the workstation of users who open the exported CSV in a spreadsheet application. Attackers can add malicious formulas like =10+20+cmd|' /C calc'!A0 in the vendor creation form, which execute when the exported CSV file is opened in spreadsheet applications.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rajodiya | ERPGo SaaS | 3.9 | — |
References
- ExploitDB-51220 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: ERPGo SaaS 3.9 CSV Injection via Vendor Creation third-party-advisory