Medium severity5.4NVD Advisory· Published Jun 12, 2025· Updated Apr 15, 2026

CVE-2023-45256

Description

Multiple SQL injection vulnerabilities in the EuroInformation MoneticoPaiement module before 1.1.1 for PrestaShop allow remote attackers to execute arbitrary SQL commands via the TPE, societe, MAC, reference, or aliascb parameter to transaction.php, validation.php, or callback.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aimeos/Moneticopaiementinferred2 versions
<1.1.1+ 1 more
- (no CPE)range: <1.1.1
- (no CPE)range: <1.1.1
Package: https://packagist.org/packages/mpresta/moneticopaiement

Patches

Vulnerability mechanics

References

security.friendsofpresta.org/modules/2025/06/10/MoneticoPaiement.htmlnvd
www.monetico-paiement.fr/fr/installer/telechargements/kit_telechargeable.aspxnvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000