PatchTheCVEecw-shop vulnerabilities
Recent CVEs affecting ecw-shop products. 4 tracked.
ecw-shop has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-08-19. Highest priority: CVE-2003-1231 (score 37/100).
- CVE-2005-2623 MEDIUM 5.0 DOWNGRADE ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negativ
- CVE-2005-2622 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 6.0.2 allows remote attackers to inject arbi
- CVE-2005-2621 MEDIUM 5.0 DOWNGRADE index.php in ECW-Shop 6.0.2 allows remote attackers to obtain sensitive information via the (1) min or (2) max
- CVE-2003-1231 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitr
FAQ
How do I fix ecw-shop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ecw-shop being exploited right now?
None of the tracked ecw-shop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ecw-shop CVE should I patch first?
CVE-2003-1231 currently ranks highest (37/100): Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitr.