command injection
nounUK /kəˈmɑːnd ɪnˈdʒekʃən/
US /kəˈmænd ɪnˈdʒekʃən/
A trick where bad input makes a computer run harmful commands.
The app was hacked through command injection because it trusted user input.
OTHER MEANINGS
2. A security flaw where untrusted data is passed to a system shell.
The scanner flagged a command injection in the login form.
3. An attack technique used to take control of a server.
Attackers used command injection to install a backdoor.
4. A coding mistake that lets users run system commands.
The developer fixed the command injection by sanitizing inputs.