PT-2011-5118

Name of the Vulnerable Software and Affected Versions BestShopPro affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the str parameter in the...

PT-2011-5117

Name of the Vulnerable Software and Affected Versions BestShopPro affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the str parameter in the pokaz podkat.php file. Recommendations At the moment, there is no information about a newe...

CVE-2007-4783: Improper Input Validation

The iconvsubstr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause 1 a denial of service application crash via a long string in the charset parameter, probably also requiring a long string in the str parameter; or 2 a denial of service temporary application hang via a...

CVE-2006-6749: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the parseexpression function in parseconfig in OpenSER 1.1.0 allows attackers to have an unknown impact via a long str parameter...