Command Injection

---

Command injection is an attack method in which a hacker alters dynamically generated content on a web page by entering HTML code into an input mechanism, such as a form field that lacks effective validation constraints. A malicious hacker (also known as a cracker) can exploit that vulnerability to gain unauthorized access to data or network resources. When users visit an affected web page, their browsers interpret the code, which may cause malicious commands to execute in the users' computers and across their networks.