CVE-2006-1706: Kansok Communications Shopweezle

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) login.php and (b) memo.php; and the (2) itemgr, (3) brandID, and (4) album parameters to (c) index.php. NOTE: this issue also produces resultant full path disclosure from invalid SQL queries.

Affected products

• Kansok Communications Shopweezle: version 2.0 only; version 2.0_personal only; version 2.0_professional only; version 2.0_professional_plus only

Published 2006-04-11. Last modified 2026-06-16.