Test case 174199

Deprecated test case

This version contains mistakes, making it deprecated. Deprecated test cases should not be used for new work. However, They remain in the SARD as a reference to redo previous work. The latest version of this test case is available here.

Type: source code
State: good
Author: Bertrand Stivalet and Aurelien Delaitre
Status: candidate
Language: PHP
Submission Date: 20 Oct 2015

Description

Safe sample
input : execute a ls command using the function system, and put the last result in $tainted
SANITIZE : use str_replace to escape special chars -
construction : use of sprintf via a %s with simple quote

Test Suites

PHP Vulnerability Test Suite

Have any comments on this test case? Please, send us an email.