Vulnerabilities

Command Injection

English

Overview

An attack that gets an unintended OS command executed via user input.

Details

An attack that exploits inadequate input validation to inject a malicious command into an OS command an application invokes. A typical cause is allowing shell special characters like ; or | to chain additional commands together.

More Security terms