CVE:CVE-2003-1231
CNNVD:CNNVD-200312-444
ECW-Shop 5.5版本的index.php存在跨站脚本漏洞。远程攻击者可以借助cat参数注入任意web脚本或HTML。
solution:Upgrade ecw-shop ecw-shop to a higher version than 5.01,5.5,and avoid the version 5.01,5.5