Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
`+Zn+"^"},test_match:function(zn,Zn){var Nr,On,xi;if(this.options.backtrack_lexer&&(xi={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(xi.yylloc.range=this.yylloc.range.slice(0))),On=zn[0].match(/(?:\r\n?|\n).*/g),On&&(this.yylineno+=On.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:On?On[On.length-1].length-On[On.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+zn[0].length},this.yytext+=zn[0],this.match+=zn[0],this.matches=zn,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(zn[0].length),this.matched+=zn[0],Nr=this.performAction.call(this,this.yy,this,Zn,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),Nr)return Nr;if(this._backtrack){for(var In in xi)this[In]=xi[In];return!1}return!1},next:function(){if(this.done)return this.EOF;this._input||(this.done=!0);var zn,Zn,Nr,On;this._more||(this.yytext="",this.match="");for(var xi=this._currentRules(),In=0;In<xi.length;In++)if(Nr=this._input.match(this.rules[xi[In]]),Nr&&(!Zn||Nr[0].length>Zn[0].length)){if(Zn=Nr,On=In,this.options.backtrack_lexer){if(zn=this.test_match(Nr,xi[In]),zn!==!1)return zn;if(this._backtrack){Zn=!1;continue}else return!1}else if(!this.options.flex)break}return Zn?(zn=this.test_match(Zn,xi[On]),zn!==!1?zn:!1):this._input===""?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+`. Unrecognized text.