For instance, an application might have a control panel for every person with particular language variable configurations, which it stores within a config file. Attackers can modify the language parameter to inject code in the configuration file, allowing them to execute arbitrary instructions.