VB008
Shell execution
Visual Basic 6
Warning
Security
Launching external commands is command injection the moment any argument is user-influenced
launching external commands is command injection the moment any argument is user-influenced.
Why this severity
launching external commands is command injection the moment any argument is user-influenced.
Known false positives
fixed, fully hardcoded command lines in build or maintenance tooling.
Remediation example
' Prefer a specific API over launching a process; ' if Shell is unavoidable, never concatenate user input into the command.