Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
StorageFile.insertFile=function(b,e,f,c,k){var l=mxUtils.bind(this,function(u){var x=function(){var E=new StorageFile(b,f,e);E.saveFile(e,!1,function(){c(E)},k)};u?b.confirm(mxResources.get("replaceIt",[e]),x,k):x()});StorageFile.getFileContent(b,e,function(u){l(null!=u)},function(){l(!1)})};StorageFile.getFileContent=function(b,e,f,c){b.getDatabaseItem(e,function(k){f(null!=k?k.data:null)},mxUtils.bind(this,function(){null==b.database?b.getLocalData(e,f):null!=c&&c()}),"files")};