input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : direct user input in string filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove all '\', '*', '(', ')', 'u0000', '/' in parameter sink : XPATH prepared exec_query : xpath prepared statement