added code injection poc