Description (CNA)
Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productId, (3) sk, (4) x, or (5) so parameter to (a) product_review.php; or the (6) orderNo parameter to (b) order-track.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/21072
- http://marc.info/?l=bugtraq&m=116343783720459&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30214
ADP enrichment
No English description supplied.