1 writeup tagged with Formula Injection
Unit conversion web app vulnerable to server-side formula injection, leading to arbitrary OS command execution.