A variable is passed to a shell command execution function enabling arbitrary command execution.
Avoid shell calls with user data; use escapeshellarg/escapeshellcmd or safe library APIs.