Command Injection
Critical · Injection · CWE-78
Description
Input is executed by the OS shell.
Root cause
Passing input to shell commands.
Impact
Full server compromise.
Detection
Process monitoring, EDR, unusual child processes of web servers.
Mitigation
Avoid shell calls; use safe APIs with argument arrays.
Secure coding
Use subprocess with list args and shell=False.
Safe lab example
DVWA Command Injection module
Practise related skills in Labs or deepen on Academy library.