Safe sample input : use exec to execute the script /tmp/tainted.php and store the output in $tainted sanitize : check if there is only letters construction : concatenation with simple quote

Safe sample input : use exec to execute the script /tmp/tainted.php and store the output in $tainted sanitize : check if there is only letters construction : concatenation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object construction : use of sprintf via a %s with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object construction : interpretation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object construction : concatenation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object construction : use of sprintf via a %s with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object construction : interpretation with simple quote