Guimarães, B. (2009). "Advanced SQL injection to operating system full control."