PT-2011-5117

Name of the Vulnerable Software and Affected Versions BestShopPro affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the str parameter in the pokaz podkat.php file. Recommendations At the moment, there is no information about a newe...

CVE-2011-4811: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pokazpodkat.php in BestShopPro allows remote attackers to execute arbitrary SQL commands via the str parameter...

CVE-2007-4783: Improper Input Validation

The iconvsubstr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause 1 a denial of service application crash via a long string in the charset parameter, probably also requiring a long string in the str parameter; or 2 a denial of service temporary application hang via a...

CVE-2006-6749: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the parseexpression function in parseconfig in OpenSER 1.1.0 allows attackers to have an unknown impact via a long str parameter...