CVE-2011-4811: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pokazpodkat.php in BestShopPro allows remote attackers to execute arbitrary SQL commands via the str parameter...