Unscored CVE-2006-7171 EUVD-2006-7153GHSA-44q3-f5j3-5jw6

product_review.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of …

Published Mar 20, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

product_review.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of the x[] parameter.

References

megamall-productreview-path-disclosure(30215) vdb-entry
20061112 Mega Mall [ multiples injection sql & full path disclosure ] mailing-list