input : shell commands no filtering sink : check if a file exists

input : shell commands no filtering sink : check if a file exists

input : shell commands no filtering sink : check if a file exists

input : shell commands no filtering sink : check if a file exists

input : shell commands no filtering sink : check if a file exists

input : shell commands no filtering sink : check if a file exists

input : shell commands no filtering sink : check if a file exists

input : shell commands no filtering sink : check if a file exists

input : shell commands no filtering sink : check if a file exists

Command line args filtering : remove all "../" in path sink : NULL Pointer Dereference

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement

Command line args Xpath replace char sink : XPATH prepared exec_query : xpath prepared statement