Enviar por SMS: Realistic Vulnerability Injections in PHP Web Applications