I wonder whether code injection is possible for .NET-based web applications as defined by OWASP. After performing some research on .NET and code injection there is something called code injection in the context of .NET (like this) but appears unrelated to code injection against web applications.
The default example for code injection (in accord to the OWASP definition) is against PHP applications, where code is dynamically created such that it depends on user input and then executed through
eval(). Is there something alike for .NET?