If a web server accepts input from the user and passes it to a bash shell, to which attack method is it vulnerable?

{} [+]