Testing For Code Injection Vulnerability