Test case 160787

Deprecated test case

This version contains mistakes, making it deprecated. Deprecated test cases should not be used for new work. However, They remain in the SARD as a reference to redo previous work. The latest version of this test case is available here.

Type: source code
State: good
Author: Bertrand Stivalet and Aurelien Delaitre
Status: candidate
Language: PHP
Submission Date: 20 Oct 2015

Description

Safe sample
input : use exec to execute the script /tmp/tainted.php and store the output in $tainted
SANITIZE : use str_replace to escape special chars -
construction : concatenation with simple quote

Test Suites

PHP Vulnerability Test Suite

Have any comments on this test case? Please, send us an email.