Injection-based flaws