As an example, an application might need a control panel for each user with precise language variable settings, which it retailers inside a config file. Attackers can modify the language parameter to inject code into your configuration file, letting them to execute arbitrary commands. Dr. Hug