What is this type of vulnerability called?

Question

Burglary protection

From the user, the site receives an IP, and then pings it and returns the result of the ping utility to the user.
However, input validation is not implemented, which makes it possible to force the server to execute a command by appending it with an ampersand.
if we tell the site:
8.8.8.8 & ls
then along with the results of the ping we will also get a list of directories

Answer 1

RCE (Remote Code Execution/Evaluation) .

Answer 2

It's called sloppiness.
List of types of vulnerabilities www.captcha.ru/articles/antihack Choose any
But more like XSS and SQL Injection (replace sql with bash)