JavaScript Injection JavaScript Injection Server-side JavaScript code injection: in-band command output and time-based blind oracles. In-band (2) Time-based (1)