再谈CSV注入攻击
http://www.4hou.com/technology/8321.html

Node.js CVE-2017-14849 漏洞分析
https://paper.seebug.org/439/

node.js + postgres 从注入到Getshell
https://www.leavesongs.com/PENETRATION/node-postgres-code-execution-vulnerability.html