Inclusion Gadget

A file already present on a server that, when pulled in by a file-inclusion bug, converts a limited primitive into code execution because the attacker can steer its behavior. PEAR's command helper is a common example: included with attacker-supplied arguments, it writes a chosen PHP payload to disk.