A code injection vulnerability is about injecting program code into an application, which is then integrated and executed by the application. Depending on the type of vulnerability an attacker may manipulate the behavior of the application and inject program code, which may lead to a complete takeover of the system. Code injection is one of the most extensive and multi-faceted topics in the field of web security and provides many possibilities: SQL injection, Web script injection, OS command injection, SOAP injection, JSON injection, XPATH injection, etc.
