ABAP and Operating System Statements
Operating system statements or system commands execute statements or programs directly on the operating system of an application server or a presentation server. Executing operating system statements from ABAP programs should be the exception not the rule, however it may become necessary in system or administration programs to call operating system functions that cannot be accessed by ABAP statements. In certain circumstances, input from external sources may need to be passed to the operating system.
7.31 | 7.40 | 7.54
Using input from external sources in operating system statements incurs the risk of system command injections.