CAPEC™ 248: Command Injection
Description
An adversary looking to execute a command of their choosing, injects new items into an existing command thus modifying interpretation away from what was intended. Commands in this context are often standalone strings that are interpreted by a downstream component and cause specific responses. This type of attack is possible when untrusted values are used to build these command strings. Weaknesses in input validation or command construction can enable the attack and lead to successful exploitation.
Source: CAPEC™ 248
Related ASVS Requirements
ASVS (5.0): 1.2.10, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.2.8, 1.2.9, 1.3.10, 1.3.11, 1.3.2, 1.3.3, 1.3.6, 1.3.8, 16.3.3, 16.4.1, 5.1.1, 5.2.2, 5.3.1, 5.3.2, 5.4.1, 5.4.2, 5.4.3
