CVE-2005-4290

The CVE-2005-4290 entry describes a cross-site scripting (XSS) vulnerability in ECW-Cart 2.03 and earlier, located in index.cgi. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the parameters (1) kword, (2) max, (3) min, (4) comp, and (5) f. Affected software ...