Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : check if there is only letters construction : concatenation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : check if there is only letters construction : use of sprintf via a %s with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : check if there is only letters construction : use of sprintf via a %s with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : check if there is only letters construction : interpretation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : check if there is only letters construction : interpretation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : check if there is only letters construction : concatenation with simple quote

Safe sample input : execute a ls command using the function system, and put the last result in $tainted sanitize : check if there is only letters construction : concatenation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : use of sprintf via a %s with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : interpretation with simple quote

Safe sample input : use shell_exec to cat /tmp/tainted.txt sanitize : use mysql_real_escape_string via an object and a classic getter construction : concatenation with simple quote