Web Vulnerabilities
Injection Flaw
Also: injection
A bug where untrusted data is mixed into a command or document and gets interpreted as instructions instead of plain data.
In more detail
SQL injection, command injection and cross-site scripting are the same mistake in three places: code and data travel in one string, and the receiver cannot tell where one ends. The lasting fix is to keep them separate, with parameters, argument lists or output encoding, rather than trying to clean the string.