Command Injection

A vulnerability that allows executing arbitrary system commands on the server through unsanitized user input. Command injection occurs when an application passes user data directly to a system shell (exec, system, popen). It gives full server access and constitutes a critical flaw.