VULNERABILITY INTELLIGENCE
CVE-2023-45256
CVSS score5.4 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2025-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Description
Multiple SQL injection vulnerabilities in the EuroInformation MoneticoPaiement module before 1.1.1 for PrestaShop allow remote attackers to execute arbitrary SQL commands via the TPE, societe, MAC, reference, or aliascb parameter to transaction.php, validation.php, or callback.php.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89