← Back

Koan Software

koan_software

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Mega Mall
mega_mall
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-7171
1Koan Software
1Mega Mall
Apr 23, 2026
Mar 20, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
product_review.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of the x[] parameter.
CVE-2006-7170
1Koan Software
1Mega Mall
Apr 23, 2026
Mar 20, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productId, (3) sk, (4) x, or (5) so parameter to (a) product_review.php; or th...Show more
Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productId, (3) sk, (4) x, or (5) so parameter to (a) product_review.php; or the (6) orderNo parameter to (b) order-track.php.Show less