internal state, such as whether a username is valid or not.
1. CWE-89 : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
2. CWE-78 : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
3. CWE-22 : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')