Visual Basic 6 : Command injection