One example is, an application may have a user interface for each person with specific language variable configurations, which it shops in the config file. Attackers can modify the language parameter to inject code to the configuration file, letting them to execute arbitrary instructions. No,