CVE-2014-2008

2014-09-1214:55:06

CWE-89

mitre

web.nvd.nist.gov

sql injection

mpay24

payment module

prestashop

cve-2014-2008

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

Low

EPSS

0.011

Percentile

84.4%

JSON

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter.

Affected configurations

Nvd

Node

mpay24_projectmpay24Range≤1.5.1prestashop

mpay24_projectmpay24Match1.4.0prestashop

mpay24_projectmpay24Match1.4.1prestashop

mpay24_projectmpay24Match1.4.2prestashop

mpay24_projectmpay24Match1.4.3prestashop

mpay24_projectmpay24Match1.4.4prestashop

mpay24_projectmpay24Match1.4.5prestashop

mpay24_projectmpay24Match1.4.6prestashop

mpay24_projectmpay24Match1.4.7prestashop

mpay24_projectmpay24Match1.4.8prestashop

mpay24_projectmpay24Match1.4.9prestashop

mpay24_projectmpay24Match1.5.0prestashop

VendorProductVersionCPE
mpay24_projectmpay24*cpe:2.3:a:mpay24_project:mpay24:*:*:*:*:*:prestashop:*:*
mpay24_projectmpay241.4.0cpe:2.3:a:mpay24_project:mpay24:1.4.0:*:*:*:*:prestashop:*:*
mpay24_projectmpay241.4.1cpe:2.3:a:mpay24_project:mpay24:1.4.1:*:*:*:*:prestashop:*:*
mpay24_projectmpay241.4.2cpe:2.3:a:mpay24_project:mpay24:1.4.2:*:*:*:*:prestashop:*:*
mpay24_projectmpay241.4.3cpe:2.3:a:mpay24_project:mpay24:1.4.3:*:*:*:*:prestashop:*:*
mpay24_projectmpay241.4.4cpe:2.3:a:mpay24_project:mpay24:1.4.4:*:*:*:*:prestashop:*:*
mpay24_projectmpay241.4.5cpe:2.3:a:mpay24_project:mpay24:1.4.5:*:*:*:*:prestashop:*:*
mpay24_projectmpay241.4.6cpe:2.3:a:mpay24_project:mpay24:1.4.6:*:*:*:*:prestashop:*:*
mpay24_projectmpay241.4.7cpe:2.3:a:mpay24_project:mpay24:1.4.7:*:*:*:*:prestashop:*:*
mpay24_projectmpay241.4.8cpe:2.3:a:mpay24_project:mpay24:1.4.8:*:*:*:*:prestashop:*:*

Vendor	Product	Version	CPE
mpay24_project	mpay24	*	cpe:2.3:a:mpay24_project:mpay24::::::prestashop::*
mpay24_project	mpay24	1.4.0	cpe:2.3:a:mpay24_project:mpay24:1.4.0:::::prestashop::
mpay24_project	mpay24	1.4.1	cpe:2.3:a:mpay24_project:mpay24:1.4.1:::::prestashop::
mpay24_project	mpay24	1.4.2	cpe:2.3:a:mpay24_project:mpay24:1.4.2:::::prestashop::
mpay24_project	mpay24	1.4.3	cpe:2.3:a:mpay24_project:mpay24:1.4.3:::::prestashop::
mpay24_project	mpay24	1.4.4	cpe:2.3:a:mpay24_project:mpay24:1.4.4:::::prestashop::
mpay24_project	mpay24	1.4.5	cpe:2.3:a:mpay24_project:mpay24:1.4.5:::::prestashop::
mpay24_project	mpay24	1.4.6	cpe:2.3:a:mpay24_project:mpay24:1.4.6:::::prestashop::
mpay24_project	mpay24	1.4.7	cpe:2.3:a:mpay24_project:mpay24:1.4.7:::::prestashop::
mpay24_project	mpay24	1.4.8	cpe:2.3:a:mpay24_project:mpay24:1.4.8:::::prestashop::