Questions tagged [csv]
comma-separated-value is a basic file format for storing row-column type data. Use this tag for security issues relating to the format itself, or where the fact that the data is csv-formatted is core to the question.
7 questions
3
votes
2
answers
2k
views
Preventing CSV Injection
I am creating an application that takes information from another system and writes reports in CSV format. I am trying to mitigate CSV Injection vulnerabilities on it. I have done some research and I ...
- 133
5
votes
1
answer
2k
views
What security implications are involved when using a CSV file to fill a SQL table?
I have some data on CSV files and I want automate the input of this data into an SQL database using Powershell. The data is mostly, if not completely, numbers.
I am using a script based on the one ...
- 153
1
vote
1
answer
1k
views
Can ClamAV detect CSV Injection?
I'm allowing users to upload CSV files. Other users can download these files. I'm aware that CSV could be an attack vector.
Would a ClamAV (or other AV) scan offer protection against such a file?
...
- 13
2
votes
2
answers
291
views
File upload attack vectors when file is not saved to disk
I'm curious to know if there are any significant threats presented by files which are uploaded and read but are never saved to disk? I've read countless articles about file uploads regarding storage ...
- 223
1
vote
2
answers
902
views
What are some examples of injection attacks into databases that abuse common programs besides SQL?
Most data validation deals with SQL injection attacks. My question is, what other types of injection types are there that use common programs, and what are good defenses against them?
- 715
4
votes
1
answer
16k
views
Preventing dangerous CSV Formula Injection
I have a form that takes user input and records them in a table. My form sanitizes user input by deleting certain characters (mentioned below). I can export a CSV of the table, which outputs the cells ...
- 511
10
votes
2
answers
20k
views
Can a CSV contain malicious code?
I am working with a system that allows users to upload CSV files, that are downloaded by other users.
The system validates (amongst other things) that all CSV files can be parsed by an RFC 4180 ...
- 2,776