AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2006-7170

HIGH · CVSS 7.5 EPSS 1.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-03-20 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2006-7170
Severity
HIGH
CVSS
7.5
EPSS
1.28%

Original Filing — NVD Description

Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productId, (3) sk, (4) x, or (5) so parameter to (a) product_review.php; or the (6) orderNo parameter to (b) order-track.php.