GCVE - cpe:2.3:a:mpay24_project:mpay24:1.5.0:*:*:*:*:prestashop:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mpay24_project:mpay24:1.5.0:*:*:*:*:prestashop:*:*

part: a version: 1.5.0 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-2009`	vulnerable	2026-06-08 05:05:27.155872	Details available The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path, and other sensitive information via a direct request to api/curllog.log. Published: 2014-09-12T14:00:00.000Z Updated: 2024-08-06T09:58:16.130Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/95721 http://packetstormsecurity.com/files/128136/Mpay24-Payment-Module-1.5-Information-Disclosure-SQL-Injection.html http://osvdb.org/show/osvdb/110738 http://www.exploit-db.com/exploits/34586 http://seclists.org/fulldisclosure/2014/Sep/23	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2008`	vulnerable	2026-06-08 05:05:27.155080	Details available SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter. Published: 2014-09-12T14:00:00.000Z Updated: 2024-08-06T09:58:16.300Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/128136/Mpay24-Payment-Module-1.5-Information-Disclosure-SQL-Injection.html http://www.exploit-db.com/exploits/34586 http://seclists.org/fulldisclosure/2014/Sep/23 http://osvdb.org/show/osvdb/110737 https://exchange.xforce.ibmcloud.com/vulnerabilities/95720	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.