CVE-2014-2023

EUVD-2014-2075
Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (2) unsubscribe_topic.php in mobiquo/functions/.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
tapatalktapatalk
1.0.0
tapatalktapatalk
1.0.1
tapatalktapatalk
1.0.2
tapatalktapatalk
1.1.0
tapatalktapatalk
1.1.1
tapatalktapatalk
1.1.2
tapatalktapatalk
1.2.0
tapatalktapatalk
1.2.1
tapatalktapatalk
1.2.3
tapatalktapatalk
1.2.6
tapatalktapatalk
2.0
tapatalktapatalk
3.1.2
tapatalktapatalk
3.1.3
tapatalktapatalk
3.1.4
tapatalktapatalk
3.1.5
tapatalktapatalk
3.2.0
tapatalktapatalk
3.9.0
tapatalktapatalk
3.9.1
tapatalktapatalk
3.9.2
tapatalktapatalk
3.9.3
tapatalktapatalk
4.0.0
tapatalktapatalk
4.1.0
tapatalktapatalk
4.2.0
tapatalktapatalk
4.2.1
tapatalktapatalk
4.3.0
tapatalktapatalk
4.3.1
tapatalktapatalk
4.4.0
tapatalktapatalk
4.5.0
tapatalktapatalk
4.5.1
tapatalktapatalk
4.5.2
tapatalktapatalk
4.6.0
tapatalktapatalk
4.7.0
tapatalktapatalk
4.7.1
tapatalktapatalk
4.7.2
tapatalktapatalk
4.8.0
tapatalktapatalk
4.8.1
tapatalktapatalk
4.9.0
tapatalktapatalk
5.0.0
tapatalktapatalk
5.0.1
tapatalktapatalk
5.1.0
tapatalktapatalk
5.1.1
tapatalktapatalk
5.1.2
tapatalktapatalk
5.1.3
tapatalktapatalk
5.2.0
tapatalktapatalk
5.2.1
𝑥
= Vulnerable software versions