By way of example, an application may need a user interface for each consumer with unique language variable settings, which it merchants in a very config file. Attackers can modify the language parameter to inject code in to the configuration file, allowing them to execute arbitrary instructions