Re:Microsoft Word Document Upload to Stored XSS: A Case Study
by darshitpp on Monday May 14, 2018 @09:15AM
(#17065177)
I'm curious if the same can be done via an Excel .xls or .xlsx file
[ Parent
| on HN ]
Re:Microsoft Word Document Upload to Stored XSS: A Case Study
by yardshop on Monday May 14, 2018 @11:29AM
(#17066306)
It would possibly work with XLSX or PPTX or any of the newer Office file formats that rely on zipping a folder of XML files. Open Document Format files like those from Libre Office might be capable of this too.
XLS, PPT, DOC or other old style Office files don't follow this format so this specific approach wouldn't work on those.