Safe sample input : Get a serialize string in POST and unserialize it sanitize : check if there is only letters construction : concatenation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object construction : use of sprintf via a %s with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object construction : interpretation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object construction : concatenation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object construction : use of sprintf via a %s with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object construction : interpretation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : use mysql_real_escape_string via an object construction : concatenation with simple quote