Lucene search
HistoryMar 20, 2007 - 10:19 a.m.
CVE-2006-7170
sql injection
koan software mega mall
remote attackers
arbitrary commands
security vulnerability
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
Low
EPSS
0.001
Percentile
51.1%
Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productId, (3) sk, (4) x, or (5) so parameter to (a) product_review.php; or the (6) orderNo parameter to (b) order-track.php.
Affected configurations
Node
koan_softwaremega_mall
| Vendor | Product | Version | CPE |
|---|---|---|---|
| koan_software | mega_mall | cpe:/a:koan_software:mega_mall:::: |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
Low
EPSS
0.001
Percentile
51.1%
Related for CVE-2006-7170