It also seems to have a fair bit in common with SQL injection.