By way of example, an software might have a user interface for each user with specific language variable settings, which it retailers within a config file. Attackers can modify the language parameter to inject code in to the configuration file, allowing them to execute arbitrary instructions.