Dangers of CSV Injection

Re:Dangers of CSV Injection by ComodoHacker on Tuesday October 10, 2017 @05:09AM (#15440425)

My Excel 2010 doesn't execute shell code from author's example. Heck, it doesn't even parse CSV and loads everything into one column as text. What am I doing wrong?

[ Parent | on HN ]

Re:Dangers of CSV Injection by randkyp on Tuesday October 10, 2017 @05:30AM (#15440506)

As weird as it sounds, it might be related to your system region settings, specifically the decimal point sign and the thousands separator sign. I've been only able to open CSVs by manually importing them with Excel's 'import data from text file' function.

[ Parent | on HN ]

Re:Dangers of CSV Injection by tyingq on Tuesday October 10, 2017 @08:08AM (#15441091)

It does depend on using the csv file extension. Anything else brings up the import wizard.

[ Parent | on HN ]