To exploit the vulnerability an attacker will alter a variable that is passed to one of these functions to cause it to include malicious code from a remote resource. To mitigate this vulnerability all user input needs to be validated before being used.
To exploit an oversight, an attacker will change a parameter sent to one of these functions to include harmful code from a remote source. To address this vulnerability, all user input must be verified before being employed.