Vulnerabilities

TI-2014-07181 CVE-2014-8752 · GHSA-5w28-vv2q-8hr9

Multiple cross-site scripting (XSS) vulnerabilities in view.php in JCE-Tech PHP Video…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in view.php in JCE-Tech PHP Video Script (aka Video Niche Script) 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) video or (2) title param…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2014-12-31 No fix listed CWE-79

TI-2010-02364 CVE-2010-2461 · GHSA-9p22-mxrj-58pq

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote…

LOW 35

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2010-06-25 No fix listed CWE-89

TI-2010-02363 CVE-2010-2460 · GHSA-g2m6-fh3h-866m

SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script…

LOW 35

SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS) 1 allows remote attackers to execute arbitrary SQL commands via the mechant_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2010-06-25 No fix listed CWE-89

TI-2010-00360 CVE-2010-0380 · GHSA-g82f-w5wm-qcw6

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to…

LOW 27

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01954 Published 2010-01-22 No fix listed CWE-16

TI-2010-00356 CVE-2010-0376 · GHSA-72fh-93mx-wg3m

Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars…

LOW 23

Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2010-01-21 No fix listed CWE-79

TI-2010-00355 CVE-2010-0375 · GHSA-p66x-hgpx-35w5

SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded…

LOW 35

SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01002 Published 2010-01-21 No fix listed CWE-89

TI-2009-03043 CVE-2009-3198 · GHSA-vj66-fqfw-pvg4

Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech Affiliate Master…

LOW 22

Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01097 Published 2009-09-15 No fix listed CWE-79

TI-2009-03042 CVE-2009-3197 · GHSA-xf3g-8p9v-323q

Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars Script…

LOW 22

Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars Script allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01097 Published 2009-09-15 No fix listed CWE-79

TI-2009-03041 CVE-2009-3196 · GHSA-84vv-6fh8-r3gv

Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via the key parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01498 Published 2009-09-15 No fix listed CWE-79

TI-2009-03040 CVE-2009-3195 · GHSA-vp78-g43w-3482

Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rss.php and (2) search.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01525 Published 2009-09-15 No fix listed CWE-79

TI-2009-03039 CVE-2009-3194 · GHSA-m3p7-jqjp-g7pp

Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01498 Published 2009-09-15 No fix listed CWE-79

Vulnerabilities

Filters