What are unescaped or unquoted file paths? What's the risk? How does it work? Check out this Tech Defense for all of the details.