← Back

Kansok Communications

kansok_communications

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Shopweezle
shopweezle
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-1707
1Kansok Communications
1Shopweezle
Apr 16, 2026
Apr 11, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
index.php in Shopweezle 2.0 allows remote attackers to include arbitrary local files via the url parameter.
CVE-2006-1706
1Kansok Communications
1Shopweezle
Apr 16, 2026
Apr 11, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) login.php and (b) memo.php; and the (2) itemgr, (3) brandID, and (4) a...Show more
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) login.php and (b) memo.php; and the (2) itemgr, (3) brandID, and (4) album parameters to (c) index.php. NOTE: this issue also produces resultant full path disclosure from invalid SQL queries.Show less