View Attack Vector

General Information

OS Command Injection

Variants:
Direct Persistent Session

Also Known As:
OS Commanding, Shell Injection

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Application

Affected Mechanisms:
Input Validation

Invented In:
20/03/1996

Added In:
17/12/2014

Quick Introduction to the Topic:

Vector Operation Method:
Malicious inputs can affect the structure of executed server-side operating system instructions

Direct Variant:

OS Command Injection

Also Known As:
Command Injection

Typical Severity:
Critical

Resources:

Wiki

CWE

White Papers:

Learn More:

Persistent Variant:

Stored OS Command Injection

Also Known As:
Persistent OS Command Injection

Typical Severity:
Critical

Resources:

White Papers:

Learn More:

Session Variant:

OS Command Injection via Session Puzzling

Also Known As:
Session OS Command Injection

Typical Severity:
Critical

Resources:

White Papers:

Learn More: