Code injections occur when applications allow the dynamic execution of code instructions from untrusted data. + An attacker can influence the behavior of the targeted application and modify it to get access to sensitive data.