Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input Xpath replace char sink : SQL query

Hardcoded string input filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : SQL query

Hardcoded string input filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : SQL query