A web application analyst reviewing Apache access logs for an internal server notices the following request against a network diagnostics page: GET /ping.php?host=8.8.8.8;cat+/etc/passwd HTTP/1.1 (200). The application is designed to let users enter an IP address to test connectivity. Which type of attack does this request most likely represent?