Lua Api Command Injection Vulnerability