For example, an application might have a user interface for every user with particular language variable settings, which it shops in the config file. Attackers can modify the language parameter to inject code into your configuration file, making it possible for them to execute arbitrary commands