National Institute of Standards and Technology
Package illustrating a test case

Test case 252445

Description

Source: filter_input_array_prm__(INPUT_GET)_(((t),(FILTER_SANITIZE_URL)))
Sanitization: preg_match_prm__(_^[0-9]*$_)
Dataflow: assignment
Context: sql_apostrophe
Sink: mysqli_real_query_prm__<$>(db)

Flaws

Test Suites

Have any comments on this test case? Please, send us an email.