Skip to content
Noroxi

jce-tech records

11 published records for vendor jce-tech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    11 records
    • CVE-2010-0375
      30Monitor

      SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitra

      HighCVSS 7.5Proof of conceptEPSS 1%

      jce-tech · php calendars scriptJan 21, 2010

    • CVE-2010-2461
      30Monitor

      SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store

      HighCVSS 7.5Proof of conceptEPSS 1%

      jce-tech · overstock scriptJun 25, 2010

    • CVE-2010-2460
      30Monitor

      SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS) 1 allows remote attackers to execute arbitrary

      HighCVSS 7.5Proof of conceptEPSS 1%

      jce-tech · shareasale scriptJun 25, 2010

    • CVE-2010-0380
      21Monitor

      install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify applic

      MediumCVSS 5.0Proof of conceptEPSS 2%

      jce-tech · php calendars scriptJan 22, 2010

    • CVE-2009-3195
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary we

      MediumCVSS 4.3Proof of conceptEPSS 2%

      jce-tech · auction rss content scriptSep 15, 2009

    • CVE-2010-0376
      17Monitor

      Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to in

      MediumCVSS 4.3Proof of conceptEPSS 1%

      jce-tech · php calendars scriptJan 21, 2010

    • CVE-2009-3194
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script o

      MediumCVSS 4.3Proof of conceptEPSS 1%

      jce-tech · searchfeed scriptSep 15, 2009

    • CVE-2009-3196
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or

      MediumCVSS 4.3Proof of conceptEPSS 1%

      jce-tech · php video scriptSep 15, 2009

    • CVE-2014-8752
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in view.php in JCE-Tech PHP Video Script (aka Video Niche Script) 4.0 allow remote attac

      MediumCVSS 4.3No exploitEPSS 1%

      jce-tech · video niche scriptDec 31, 2014

    • CVE-2009-3198
      17Monitor

      Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to in

      MediumCVSS 4.3No exploitEPSS 1%

      jce-tech · affiliate master datafeed parserSep 15, 2009

    • CVE-2009-3197
      17Monitor

      Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars Script allows remote attackers to inject arbitrary web scri

      MediumCVSS 4.3No exploitEPSS 1%

      jce-tech · php calendars scriptSep 15, 2009