<?xml version="1.0" encoding="utf-8"?>
<testsuites disabled="0" errors="0" failures="6" tests="6"
time="0.0">
  <testsuite disabled="0" errors="0" failures="6"
  name="semgrep results" skipped="0" tests="6" time="0">
    <testcase name="external.semgrep-rules.php.lang.security.injection.echoed-request"
    classname="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/web/check_stats.php"
    file="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/web/check_stats.php"
    line="19">
      <failure type="ERROR"
      message="`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users.">
      echo "\t&lt;code&gt;".$code."&lt;/code&gt;\n";</failure>
    </testcase>
    <testcase name="external.semgrep-rules.php.lang.security.exec-use"
    classname="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/web/command.php"
    file="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/web/command.php"
    line="18">
      <failure type="ERROR"
      message="Executing non-constant commands. This can lead to command injection.">
      execute($str);</failure>
    </testcase>
    <testcase name="external.semgrep-rules.php.lang.security.injection.echoed-request"
    classname="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/web/wandetect.php"
    file="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/web/wandetect.php"
    line="40">
      <failure type="ERROR"
      message="`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users.">
      &lt;action&gt;&lt;?echo
      $_POST["action"];?&gt;&lt;/action&gt;</failure>
    </testcase>
    <testcase name="external.semgrep-rules.php.lang.security.injection.echoed-request"
    classname="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/web/wpsacts.php"
    file="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/web/wpsacts.php"
    line="68">
      <failure type="ERROR"
      message="`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users.">
      &lt;action&gt;&lt;?echo
      $_POST["action"];?&gt;&lt;/action&gt;</failure>
    </testcase>
    <testcase name="external.semgrep-rules.php.lang.security.injection.echoed-request"
    classname="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/webinc/body/bsc_sms_send.php"
    file="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/webinc/body/bsc_sms_send.php"
    line="18">
      <failure type="ERROR"
      message="`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users.">
      &lt;input id="receiver" type="text" size="50" maxlength="15"
      value="&lt;? echo $_GET["receiver"]; ?&gt;"/&gt;</failure>
    </testcase>
    <testcase name="external.semgrep-rules.php.lang.security.injection.echoed-request"
    classname="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/webinc/js/bsc_sms_inbox.php"
    file="/logs/firmware/unblob_extracted/firmware_extract/DIR-600_fw_revb5_214b01_ALL_de_20130122/dir600b_v2.14_d1mg.bin_extract/1179788-3612812.squashfs_v4_le_extract/htdocs/webinc/js/bsc_sms_inbox.php"
    line="17">
      <failure type="ERROR"
      message="`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users.">
      var get_Treturn = '&lt;?if($_GET["Treturn"]=="") echo "0";
      else echo $_GET["Treturn"];?&gt;';</failure>
    </testcase>
  </testsuite>
</testsuites>