writeups.xyz / Server-Side Spreadsheet Injection – Formula Injection to Remote Code Execution

Submitter : c2a

Date: 11 June 2018

Bounty : undisclosed

Vulnerabilities :

• CSV Injection
• Server Side Spreadsheet Injection
• Formula Injection
• RCE

Programs :

• Google

Authors :

• Jake Miller

Link :
https://www.bishopfox.com/blog/2018/06/server-side-spreadsheet-injections/