For instance, an application might have a control panel for each user with distinct language variable settings, which it suppliers inside of a config file. Attackers can modify the language parameter to inject code into the configuration file, enabling them to execute arbitrary instructions.