Carrier

Hey can anyone give a hint for RCE? I know it has something to do with c**k parameter but can’t figure out how to use it (checked Testing for Command Injection (OTG-INPVAL-013) - OWASP ) but just can’t seem to figure out how…
Edit: Got user, thanks @AverageJuan for the hint