What happens when you don't validate/scrub data on input from whois

[Eric Kuhnke <eric.kuhnke () gmail com>]

https://research.securitum.com/fail2ban-remote-code-execution/

What happens if you put the following in your whois entry:

drop table prefixes;

Or anything similar...

https://xkcd.com/327/