In which type of attack is a hacker able to get beyond a web server’s root directory and execute commands?