Sploitus

CVE-2014-2008

4 known exploits for CVE-2014-2008

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter.

Affected products
Prestashop Mpay24 Payment Module
mpay24 Project mpay24
≤ 1.5.1, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.8, 1.4.9, 1.5.0
Fix
Available
CVSS 2.0
7.5 HIGH
EPSS
2.6% (85th percentile)
Weakness
CWE-89
NVD status
Modified
Published
2014-09-12
CVE-2014-2008 at NVD
Authoritative description, scoring and affected products

4 known exploits for CVE-2014-2008

Proof-of-concept code and exploit modules indexed by Sploitus

Mpay24 PrestaShop Payment Module 1.5 - Multiple Vulnerabilities
2014-09-08 WireghoulEXPLOITPACK
Mpay24 PrestaShop Payment Module 1.5 - Multiple Vulnerabilities
2014-09-08 WireghoulEXPLOITDB
Mpay24 Payment Module 1.5 Information Disclosure / SQL Injection Mpay24 Payment Module 1.5 Informat
2014-09-04 Eldar MarcussenZDT
Mpay24 Payment Module 1.5 Information Disclosure / SQL Injection
2014-09-03 Eldar MarcussenPACKETSTORM