Questions tagged [csv]
comma-separated-value is a basic file format for storing row-column type data. Use this tag for security issues relating to the format itself, or where the fact that the data is csv-formatted is core to the question.
6
questions
4
votes
1
answer
932
views
What security implications are involved when using a CSV file to fill a SQL table?
I have some data on CSV files and I want automate the input of this data into an SQL database using Powershell. The data is mostly, if not completely, numbers.
I am using a script based on the one ...
- 143
1
vote
1
answer
826
views
Can ClamAV detect CSV Injection?
I'm allowing users to upload CSV files. Other users can download these files. I'm aware that CSV could be an attack vector.
Would a ClamAV (or other AV) scan offer protection against such a file?
...
- 13
2
votes
2
answers
234
views
File upload attack vectors when file is not saved to disk
I'm curious to know if there are any significant threats presented by files which are uploaded and read but are never saved to disk? I've read countless articles about file uploads regarding storage ...
- 223
1
vote
2
answers
730
views
What are some examples of injection attacks into databases that abuse common programs besides SQL?
Most data validation deals with SQL injection attacks. My question is, what other types of injection types are there that use common programs, and what are good defenses against them?
- 715
3
votes
1
answer
12k
views
Preventing dangerous CSV Formula Injection
I have a form that takes user input and records them in a table. My form sanitizes user input by deleting certain characters (mentioned below). I can export a CSV of the table, which outputs the cells ...
- 491
11
votes
2
answers
14k
views
Can a CSV contain malicious code?
I am working with a system that allows users to upload CSV files, that are downloaded by other users.
The system validates (amongst other things) that all CSV files can be parsed by an RFC 4180 ...
- 2,520