Vulnerability Details CVE-2006-7170
Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productId, (3) sk, (4) x, or (5) so parameter to (a) product_review.php; or the (6) orderNo parameter to (b) order-track.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 66.3%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2006-7170
-
cpe:2.3:a:koan_software:mega_mall:-