With the use of incorporating the player name into Server.Command, it's possible to escape the command and run arbitrary commands.