CVE-2014-2009

State: Published
Severity: Not scored
Published: Sep 12, 2014
Updated: Aug 6, 2024
Reserved: Feb 17, 2014

Description

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path, and other sensitive information via a direct request to api/curllog.log.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

mpay24-cve20142009-info-disc(95721)vdb-entry
http://packetstormsecurity.com/files/128136/Mpay24-Payment-Module-1.5-Information-Disclosure-SQL-Injection.html
110738vdb-entry
34586exploit
20140903 Mpay24 prestashop payment module multiple vulnerabilitiesmailing-list
69560vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.