Jce-tech Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

JCE-Tech PHP Calendars Script2
JCE-Tech Auction RSS Content Script2
JCE-Tech Php Calendars Script2
JCE-Tech Overstock Script2
JCE-Tech Shareasale Script2

Przeciwdziałanie

Official Fix0
Temporary Fix0
Workaround0
Unavailable4
Not Defined8

Wykorzystywanie

High4
Functional0
Proof-of-Concept6
Unproven0
Not Defined2

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent0
Network12

Uwierzytelnianie

Not Defined0
High0
Low0
None12

Interakcja z użytkownikiem

Not Defined0
Required6
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤56
≤62
≤70
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤58
≤60
≤70
≤84
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤56
≤62
≤70
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k6
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k12
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (9): Affiliate Master Datafeed Parser (1), Auction RSS Content Script (1), Overstock Script (1), PHP Calendars Script (1), PHP Video Script (1), Php Calendars Script (3), SearchFeed Script (1), Shareasale Script (1), Video Niche Script (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2014-12-314.34.3JCE-Tech Video Niche Script view.php cross site scriptingNieznanyNot DefinedNot Defined0.001920.00CVE-2014-8752
2010-06-207.37.3JCE-Tech Overstock Script storecat.php sql injectionNieznanyHighUnavailable0.000640.00CVE-2010-2461
2010-06-207.37.3JCE-Tech Shareasale Script merchant_product_list.php sql injectionNieznanyHighUnavailable0.000640.00CVE-2010-2460
2010-01-105.35.0JCE-Tech Php Calendars Script Access Restriction install.php privilege escalationProgramming Language SoftwareProof-of-ConceptNot Defined0.002280.00CVE-2010-0380
2010-01-104.34.2JCE-Tech Php Calendars Script Error Message product_list.php cross site scriptingProgramming Language SoftwareHighUnavailable0.004150.02CVE-2010-0376
2010-01-107.37.1JCE-Tech Php Calendars Script product_list.php sql injectionProgramming Language SoftwareHighUnavailable0.002030.04CVE-2010-0375
2009-09-154.34.1JCE-Tech Affiliate Master Datafeed Parser search.php cross site scriptingAdvertising SoftwareProof-of-ConceptNot Defined0.001620.00CVE-2009-3198
2009-09-154.34.1JCE-Tech PHP Calendars Script search.php cross site scriptingProgramming Language SoftwareProof-of-ConceptNot Defined0.001620.00CVE-2009-3197
2009-09-154.34.1JCE-Tech PHP Video Script index.php cross site scriptingProgramming Language SoftwareProof-of-ConceptNot Defined0.001550.03CVE-2009-3196
2009-09-154.34.1JCE-Tech Auction RSS Content Script rss.php cross site scriptingAuction SoftwareProof-of-ConceptNot Defined0.001550.00CVE-2009-3195

1 więcej wpisów nie jest pokazywanych

Interested in the pricing of exploits?

See the underground prices here!