Описание
Multiple SQL injection vulnerabilities in the EuroInformation MoneticoPaiement module before 1.1.1 for PrestaShop allow remote attackers to execute arbitrary SQL commands via the TPE, societe, MAC, reference, or aliascb parameter to transaction.php, validation.php, or callback.php.
EPSS
Процентиль: 7%
0.00027
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 5.4
github
8 месяцев назад
Multiple SQL injection vulnerabilities in the EuroInformation MoneticoPaiement module before 1.1.1 for PrestaShop allow remote attackers to execute arbitrary SQL commands via the TPE, societe, MAC, reference, or aliascb parameter to transaction.php, validation.php, or callback.php.
EPSS
Процентиль: 7%
0.00027
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-89