CVE-2010-2460: Jce-Tech Shareasale Script

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS) 1 allows remote attackers to execute arbitrary SQL commands via the mechant_id parameter.

Affected products

• Jce-Tech Shareasale Script: version 1.0 only

Published 2010-06-25. Last modified 2026-06-16.