Error-based and blind command injection