Vulnerabilities

TI-2014-01576 CVE-2014-2009 · GHSA-3r53-w9gm-6mc6

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain…

LOW 33

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path, and other sensitive information via a direct request to api/curllog.log.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0741 Published 2014-09-12 No fix listed CWE-200

TI-2014-01575 CVE-2014-2008 · GHSA-wcxv-jwc5-78f4

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for…

LOW 38

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02638 Published 2014-09-12 No fix listed CWE-89

Vulnerabilities

Filters

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain…

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for…