command injection pool #44