CVE-2005-2621: Ecw-Shop

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

index.php in ECW-Shop 6.0.2 allows remote attackers to obtain sensitive information via the (1) min or (2) max parameter with a "'" (single quote), which reveals the path in an error message, possibly due to a SQL injection vulnerability.

Affected products

• Ecw-Shop Ecw-Shop: version 6.0.2 only

Published 2005-08-19. Last modified 2026-06-16.