input : shell commands filtering : remove semi-colon and all invalid filenames and chars in paths sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove semi-colon and all invalid filenames and chars in paths sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove semi-colon and all invalid filenames and chars in paths sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove semi-colon and all invalid filenames and chars in paths sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove semi-colon and all invalid filenames and chars in paths sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove semi-colon and all invalid filenames and chars in paths sink : XPATH prepared exec_query : xpath prepared statement

input : shell commands filtering : remove semi-colon and all invalid filenames and chars in paths sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement

Command line args filtering : check if there is only numbers sink : XPATH prepared exec_query : xpath prepared statement