The essence of command injection attacks in web applications (2006)

by Zhendong Su, Gary Wassermann
Venue:In Proceedings of the 33rd Annual ACM SIGPLAN - SIGACT Symposium on Principles of Programming Languages