CVE-2014-2009

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path, and other sensitive information via a…

published September 12, 2014

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path, and other sensitive information via a direct request to api/curllog.log.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07410 · 94.4th percentile
Published
2014-09-12T14:00Z
EPSS history
Timeline
  • 12 SEP 14:00Z
    The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path, and other sensitive information via a…
    cvelistv5