Back to Database
Status published
Medium
CVE-2009-3197
Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars Script allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-3197
Credits & Attribution
No credits recorded in the NVD database.
References
More from jce-tech
View All →CVE-2014-8752
Multiple cross-site scripting (XSS) vulnerabilities in view.php in JCE-Tech PHP...
Medium
4.3
CVE-2010-2461
SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows...
High
7.5
CVE-2010-2460
SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS)...
High
7.5
CVE-2010-0380
install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers...
Medium
5
CVE-2010-0376
Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars,...
Medium
4.3
Affected Vendor
jce-tech
View all reports →Affected Software
php calendars script
Vulnerable Versions:
Unknown
Timeline
Official Publish:
September 15th, 2009
Last Modified:
September 17th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.