CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-2008

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.048

EPSS Ranking 89.2%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2014-2008

Mpay24 Project » Mpay24 » Version: Any

cpe:2.3:a:mpay24_project:mpay24:*
Mpay24 Project » Mpay24 » Version: 1.4.0

cpe:2.3:a:mpay24_project:mpay24:1.4.0
Mpay24 Project » Mpay24 » Version: 1.4.1

cpe:2.3:a:mpay24_project:mpay24:1.4.1
Mpay24 Project » Mpay24 » Version: 1.4.2

cpe:2.3:a:mpay24_project:mpay24:1.4.2
Mpay24 Project » Mpay24 » Version: 1.4.3

cpe:2.3:a:mpay24_project:mpay24:1.4.3
Mpay24 Project » Mpay24 » Version: 1.4.4

cpe:2.3:a:mpay24_project:mpay24:1.4.4
Mpay24 Project » Mpay24 » Version: 1.4.5

cpe:2.3:a:mpay24_project:mpay24:1.4.5
Mpay24 Project » Mpay24 » Version: 1.4.6

cpe:2.3:a:mpay24_project:mpay24:1.4.6
Mpay24 Project » Mpay24 » Version: 1.4.7

cpe:2.3:a:mpay24_project:mpay24:1.4.7
Mpay24 Project » Mpay24 » Version: 1.4.8

cpe:2.3:a:mpay24_project:mpay24:1.4.8
Mpay24 Project » Mpay24 » Version: 1.4.9

cpe:2.3:a:mpay24_project:mpay24:1.4.9
Mpay24 Project » Mpay24 » Version: 1.5.0

cpe:2.3:a:mpay24_project:mpay24:1.5.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-2008

Products

Pricing

Contact Us