Jce-tech

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Jce-tech records in CISA KEV

No Jce-tech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Php Calendars Script 4 records LOW Affiliate Master Datafeed Parser 1 record LOW Auction Rss Content Script 1 record LOW Overstock Script 1 record LOW Php Video Script 1 record LOW Searchfeed Script 1 record LOW Shareasale Script 1 record LOW Video Niche Script 1 record LOW

Records

4 records in Php Calendars Script · all components

TI-2010-00355 CVE-2010-0375 · GHSA-p66x-hgpx-35w5

SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded…

LOW 35

SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01002 Published 2010-01-21 No fix listed CWE-89

TI-2010-00360 CVE-2010-0380 · GHSA-g82f-w5wm-qcw6

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to…

LOW 27

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01954 Published 2010-01-22 No fix listed CWE-16

TI-2010-00356 CVE-2010-0376 · GHSA-72fh-93mx-wg3m

Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars…

LOW 23

Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2010-01-21 No fix listed CWE-79

TI-2009-03042 CVE-2009-3197 · GHSA-xf3g-8p9v-323q

Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars Script…

LOW 22

Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars Script allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01097 Published 2009-09-15 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	8
Low	0
No CVSS	0