Attackers can send out crafted requests or details to the vulnerable software, which executes the destructive code as though it were being its personal. This exploitation procedure bypasses protection act