CVE-2003-1231

no score yetEPSS 1.3%

Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
Published: 2003-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ecw-shop:ecw-shop

References

http://secunia.com/advisories/10458
http://securitytracker.com/id?1008522
http://www.securiteam.com/unixfocus/6D00F2A95C.html
http://www.securityfocus.com/bid/9244
https://exchange.xforce.ibmcloud.com/vulnerabilities/14032

Check your stack JSON