Command Injection

+**Command Injection** is a [web security](/wiki/web_security) vulnerability where an attacker executes arbitrary system commands on a host operating system. It occurs when user-supplied input is processed by a system shell, bypassing proper [input validation](/wiki/input_validation) and allowing malicious commands to run. This can lead to full system compromise.

+## See also

+- [SQL Injection](/wiki/sql_injection)

+- [Code Injection](/wiki/code_injection)

+- [Vulnerability](/wiki/vulnerability)