Glossary: Security Operations and Incident Response
Command injection
An attack where someone adds their own operating system command to input that a program passes to the command shell. Example: an attacker who can choose the order number in Dana's label code.