http-server-header: Werkzeug/2.3.0 Python/3.9.2 Found /pwd "";CMD” allows for command injection

Found user boby Got password pwdtst Owned user.txt