Attackers can send out crafted requests or knowledge to the susceptible application, which executes the destructive code as if it had been its possess. This exploitation procedure bypasses stability steps