CVE-2005-4290: SOFT4E Ecw-Cart

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) kword, (2) max, (3) min, (4) comp, and (5) f parameters.

Affected products

• SOFT4E Ecw-Cart: up to and including 2.03

Published 2005-12-16. Last modified 2026-06-16.