Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use of ternary condition construction : prepared query and no right verification

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use of ternary condition construction : right verification

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use of ternary condition construction : fopen

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use of ternary condition construction : concatenation with simple quote

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : use of ternary condition construction : interpretation with simple quote

Unsafe sample input : backticks interpretation, reading the file /tmp/tainted.txt SANITIZE : use of preg_replace construction : fopen

Unsafe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : none construction : fopen

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : cast into int construction : concatenation and checks if the user is allowed to see this data

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : cast into int construction : prepared query and right verification

Unsafe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : cast into int construction : prepared query and no right verification

Safe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : cast into int construction : right verification

Unsafe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : cast into int construction : concatenation with simple quote

Unsafe sample input : backticks interpretation, reading the file /tmp/tainted.txt sanitize : cast into int construction : interpretation with simple quote

The product does not properly check inputs that are used for loop conditions when creating a random file name. If the target size of filename is too large for the filesystem, an IOException is raised and kills the current thread. Metadata - Base program: Elastic Search - Source Taint: ENVIRO...

The system or application is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object. This test will ac...

The system or application is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object. This test will ac...

The product does not properly check inputs that are used for loop conditions when creating a random file name. If the target size of filename is too large for the filesystem, an IOException is raised and kills the current thread. Metadata - Base program: Apache Jena - Source Taint: SOCKET -...

Test will take in a value that is a path to a file under the current working directory which will then be displayed. The input is checked for .. characters, then URI-decoded. This misses percent-encoded .. (%2E%2E) characters and allows arbitrary read access. Metadata - Base program: Apache P...

The software uses external input to construct a pathname that should be within a restricted directory, but it does not neutralize absolute path sequences such as '/abs/path' that can resolve to a location that is outside of that directory. This test takes in a filename to read. Since the provided...

The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service because of excessive looping. This test will try to access a user-controlled file, repeatedly trying if the access fails. The user provides an intentionally bad path, forci...

Test will take in a value that is a path to a file under the current working directory which will then be displayed. The input is checked for .. characters, then URI-decoded. This misses percent-encoded .. (%2E%2E) characters and allows arbitrary read access. Metadata - Base program: Coffee M...

Test will take in a value that is a path to a file under the working directory that will then be displayed. The path isn't checked for ../ characters and as a result will display files outside of the current working directory. Metadata - Base program: Apache Lenya - Source Taint: SOCKET - D...

The product does not properly check inputs that are used for loop conditions when creating a random file name. If the target size of filename is too large for the filesystem, an IOException is raised and kills the current thread. Metadata - Base program: Apache Lucene - Source Taint: FILE_CO...

The product does not properly check inputs that are used for loop conditions when creating a random file name. If the target size of filename is too large for the filesystem, an IOException is raised and kills the current thread. Metadata - Base program: Apache POI - Source Taint: FILE_CONTE...

The system or application is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object. This test will ac...