Description
Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
References
- 1008522 vdb-entry
- 10458 third-party-advisory
- http://www.securiteam.com/unixfocus/6D00F2A95C.html
- 9244 vdb-entry
- ecwshop-cat-xss(14032) vdb-entry