National Institute of Standards and Technology
Package illustrating a test case

Test case 500452

Description

Source: filter_input_array_prm__(INPUT_GET)_(((t),(FILTER_SANITIZE_NUMBER_FLOAT)))
Sanitization: sscanf_prm__(foo %s)
Dataflow: assignment
Context: sql_quotes
Sink: mysqli_real_query_prm__<$>(db)

Flaws

Test Suites

Have any comments on this test case? Please, send us an email.