Multiple choice technology security

Give the name of the vulnerability resides in the below code: 

... 
Runtime rt = Runtime.getRuntime(); 
Process proc = rt.exec("cmd.exe /c type "+request.getParameter("path")); //path is an Input Parameter and contains the file name. 
InputStream stdin = proc.getInputStream(); 
InputStreamReader isr = new InputStreamReader(stdin); 
BufferedReader br = new BufferedReader(isr);              
...

  1. Race Condition

  2. Command Injection

  3. Denial of Service

  4. Cross Site Request Forgery
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

The parameter path is fetched directly from the request and concatenated into a shell command executed by Runtime.getRuntime().exec(). An attacker can manipulate this parameter (e.g., using & or |) to execute arbitrary command line arguments on the host system.

Keep practicing — related questions