PARAMETERS: Injection Location - Command argument Method - GET Sanitization - Reject(high), no semicolons, ampersands, pipes, backticks, newlines, parens Output - output shown, error status disclosed, command shown