Question

Why do attack escalate once code injection vulnerabilities is injected?

Answer 1

Code injection basically enables the attacker to execute the malicious code as a result of the injection attack. The code injection generally occurs when the application evaluates the code without even validating the code first. Once the attacker can able to run the OS commands, they can easily attempt to use the shell of the OS in order to install more malicious applications. Hence the attack gets easily escalated once the code injection vulnerability is injected into the system. And attackers can gain all the access to the internal systems.