Index/command-injection
command-injection facts.
114 model facts classified under this behavior kind. Follow a row to inspect its complete access path and provenance.
SymbolLanguageRoleAccess path
execlc / stdlibsinkArgument[0]execlec / stdlibsinkArgument[0]execlpc / stdlibsinkArgument[0]execvc / stdlibsinkArgument[0]execvec / stdlibsinkArgument[0]execveatc / stdlibsinkArgument[1]execvpc / stdlibsinkArgument[0]execvpec / stdlibsinkArgument[0]fexecvec / stdlibsinkArgument[0]popenc / stdlibsinkArgument[0]posix_spawnc / stdlibsinkArgument[1]posix_spawnpc / stdlibsinkArgument[1]systemc / stdlibsinkArgument[0]wordexpc / stdlibsinkArgument[0]execjavascript / child_processsinkArgument[0]execFilejavascript / child_processsinkArgument[0]execFileSyncjavascript / child_processsinkArgument[0]execSyncjavascript / child_processsinkArgument[0]forkjavascript / child_processsinkArgument[0]spawnjavascript / child_processsinkArgument[0]spawnSyncjavascript / child_processsinkArgument[0]commandjavascript / execasinkArgument[0]commandSyncjavascript / execasinkArgument[0]quotejavascript / shell-quotesanitizerArgument[0] -> ReturnValueexecjavascript / shelljssinkArgument[0]create_subprocess_execpython / asynciosinkArgument[0]create_subprocess_execpython / asynciosinkArgument[1]subprocess_execpython / asyncio.events.AbstractEventLoopsinkArgument[0]subprocess_execpython / asyncio.events.AbstractEventLoopsinkArgument[1]subprocess_shellpython / asyncio.events.AbstractEventLoopsinkArgument[1]create_subprocess_execpython / asyncio.subprocesssinkArgument[0]create_subprocess_execpython / asyncio.subprocesssinkArgument[1]runpython / stdlibsinkArgument[0]runpython / stdlibsinkArgument[0]execlpython / ossinkArgument[0]execlpython / ossinkArgument[2]execlepython / ossinkArgument[0]execlppython / ossinkArgument[0]execlpepython / ossinkArgument[0]execvpython / ossinkArgument[0]execvpython / ossinkArgument[1]execvepython / ossinkArgument[0]execvepython / ossinkArgument[1]execvepython / ossinkArgument[2]execvppython / ossinkArgument[0]execvppython / ossinkArgument[1]execvpepython / ossinkArgument[0]execvpepython / ossinkArgument[1]execvpepython / ossinkArgument[2]popenpython / ossinkArgument[0]posix_spawnpython / ossinkArgument[0]posix_spawnppython / ossinkArgument[0]spawnlpython / ossinkArgument[0]spawnlpython / ossinkArgument[1]spawnlpython / ossinkArgument[3]spawnlepython / ossinkArgument[0]spawnlepython / ossinkArgument[1]spawnlepython / ossinkArgument[3]spawnlppython / ossinkArgument[0]spawnlppython / ossinkArgument[1]spawnlppython / ossinkArgument[3]spawnlpepython / ossinkArgument[0]spawnlpepython / ossinkArgument[1]spawnlpepython / ossinkArgument[3]spawnvpython / ossinkArgument[0]spawnvpython / ossinkArgument[1]spawnvpython / ossinkArgument[2]spawnvepython / ossinkArgument[0]spawnvepython / ossinkArgument[1]spawnvepython / ossinkArgument[2]spawnvepython / ossinkArgument[3]spawnvppython / ossinkArgument[1]spawnvppython / ossinkArgument[2]spawnvpepython / ossinkArgument[0]spawnvpepython / ossinkArgument[1]spawnvpepython / ossinkArgument[2]startfilepython / ossinkArgument[0]systempython / ossinkArgument[0]exec_commandpython / stdlibsinkArgument[0]exec_commandpython / stdlibsinkArgument[0]runpython / pexpectsinkArgument[0]spawnpython / pexpectsinkArgument[0]spawnpython / ptysinkArgument[0]quotepython / shlexsanitizerArgument[0] -> ReturnValuecallpython / subprocesssinkArgument[0]callpython / subprocesssinkArgument[1]callpython / subprocesssinkArgument[2]check_callpython / subprocesssinkArgument[0]check_callpython / subprocesssinkArgument[1]check_callpython / subprocesssinkArgument[2]check_outputpython / subprocesssinkArgument[0]check_outputpython / subprocesssinkArgument[1]check_outputpython / subprocesssinkArgument[2]getoutputpython / subprocesssinkArgument[0]getstatusoutputpython / subprocesssinkArgument[0]Popenpython / subprocesssinkArgument[0]Popenpython / subprocesssinkArgument[1]Popenpython / subprocesssinkArgument[2]runpython / subprocesssinkArgument[0]runpython / subprocesssinkArgument[1]runpython / subprocesssinkArgument[2]exectypescript / child_processsinkArgument[0]execFiletypescript / child_processsinkArgument[0]execFileSynctypescript / child_processsinkArgument[0]execSynctypescript / child_processsinkArgument[0]forktypescript / child_processsinkArgument[0]spawntypescript / child_processsinkArgument[0]spawnSynctypescript / child_processsinkArgument[0]Commandtypescript / DenosinkArgument[0]runtypescript / DenosinkArgument[0]commandtypescript / execasinkArgument[0]commandSynctypescript / execasinkArgument[0]quotetypescript / shell-quotesanitizerArgument[0] -> ReturnValueexectypescript / shelljssinkArgument[0]