Weakness

Command injection

Getting an application to run operating-system commands built from attacker input.

When software passes input to a shell command without sanitising it, characters like ; or | let an attacker append their own commands. Network appliances with web management pages are a classic place for it.