Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2015/10/04 10:34 p.m.30 views

Trello: CSV Injection

Hello, We can inject commands in the name field of a board =210 for example, and when it's exported to CSV it will be evaluated to 20 in the corresponding cell, this enables an attacker to spread malware and execute system level commands on a victim's machine if the victim downloaded the CSV file...

7.1AI score
SaveExploits0
Rows per page
Query Builder