Glossary
Command Injection
A vulnerability that allows an attacker to execute arbitrary operating system commands on a host by inserting malicious input into an application that passes user input to a system shell. It is typically prevented by avoiding shell calls with user input entirely or through strict input validation and parameterization.