CVE-2006-7170

Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productId, (3) sk, (4) x, or (5) so parameter to (a) product_review.php; or the (6) orderNo parameter to (b) order-track.php.

• CWE-89

• http://marc.info/?l=bugtraq&m=116343783720459&w=2Third Party Advisory
• http://www.securityfocus.com/bid/21072Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30214
• http://marc.info/?l=bugtraq&m=116343783720459&w=2Third Party Advisory
• http://www.securityfocus.com/bid/21072Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30214

Published

Mar 20, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-7164SimpleFileServlet in IBM WebSphere Application Server 5.0.1 …
• CVE-2006-7165IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 a…
• CVE-2006-7166IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier a…
• CVE-2006-7167Unspecified vulnerability in ProRat Server 1.9 Fix2 allows r…
• CVE-2006-7168PHP remote file inclusion vulnerability in includes/not_mem.…
• CVE-2006-7169PHP remote file inclusion vulnerability in includes/header_s…
• CVE-2006-7171product_review.php in Koan Software Mega Mall allows remote …
• CVE-2006-7172Multiple SQL injection vulnerabilities in php-stats.recphp.p…
• CVE-2006-7173Direct static code injection vulnerability in admin.php in P…
• CVE-2006-7174PHP remote file inclusion vulnerability in includes/function…
• CVE-2006-7175The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux…
• CVE-2006-7176The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux…