Unscored CVE-2005-2622 EUVD-2005-2623GHSA-vmm7-qxpw-8p4r

Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 6.0.2 allows remote attackers to inject arbitrary web script or HTML via …

Published Aug 19, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 6.0.2 allows remote attackers to inject arbitrary web script or HTML via the (1) max or (2) ctg parameter.

References

20050815 [NOBYTES.COM: #9] ECW Shop 6.0.2 - Multiple Vulnerabilities mailing-list
1014734 vdb-entry
16459 third-party-advisory