← Database

CVE-2006-7170

HIGH CVSS: 7.5 Published: 2007-03-20 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productId, (3) sk, (4) x, or (5) so parameter to (a) product_review.php; or the (6) orderNo parameter to (b) order-track.php.

Affected Platforms

Koan Software Mega Mall

Weakness Type

CWE-89

References