CVE-2014-2023
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (2) unsubscribe_topic.php in mobiquo/functions/.
Affected Platforms (CPE)
📦
Tapatalk
Tapatalk
= 1.0.0📦
Tapatalk
Tapatalk
= 1.0.1📦
Tapatalk
Tapatalk
= 1.0.2📦
Tapatalk
Tapatalk
= 1.1.0📦
Tapatalk
Tapatalk
= 1.1.1📦
Tapatalk
Tapatalk
= 1.1.2📦
Tapatalk
Tapatalk
= 1.2.0📦
Tapatalk
Tapatalk
= 1.2.1📦
Tapatalk
Tapatalk
= 1.2.3📦
Tapatalk
Tapatalk
= 1.2.6📦
Tapatalk
Tapatalk
= 2.0📦
Tapatalk
Tapatalk
= 3.1.2📦
Tapatalk
Tapatalk
= 3.1.3📦
Tapatalk
Tapatalk
= 3.1.4📦
Tapatalk
Tapatalk
= 3.1.5📦
Tapatalk
Tapatalk
= 3.2.0📦
Tapatalk
Tapatalk
= 3.9.0📦
Tapatalk
Tapatalk
= 3.9.1📦
Tapatalk
Tapatalk
= 3.9.2📦
Tapatalk
Tapatalk
= 3.9.3📦
Tapatalk
Tapatalk
= 4.0.0📦
Tapatalk
Tapatalk
= 4.1.0📦
Tapatalk
Tapatalk
= 4.2.0📦
Tapatalk
Tapatalk
= 4.2.1📦
Tapatalk
Tapatalk
= 4.3.0📦
Tapatalk
Tapatalk
= 4.3.1📦
Tapatalk
Tapatalk
= 4.4.0📦
Tapatalk
Tapatalk
= 4.5.0📦
Tapatalk
Tapatalk
= 4.5.1📦
Tapatalk
Tapatalk
= 4.5.2📦
Tapatalk
Tapatalk
= 4.6.0📦
Tapatalk
Tapatalk
= 4.7.0📦
Tapatalk
Tapatalk
= 4.7.1📦
Tapatalk
Tapatalk
= 4.7.2📦
Tapatalk
Tapatalk
= 4.8.0📦
Tapatalk
Tapatalk
= 4.8.1📦
Tapatalk
Tapatalk
= 4.9.0📦
Tapatalk
Tapatalk
= 5.0.0📦
Tapatalk
Tapatalk
= 5.0.1📦
Tapatalk
Tapatalk
= 5.1.0📦
Tapatalk
Tapatalk
= 5.1.1📦
Tapatalk
Tapatalk
= 5.1.2📦
Tapatalk
Tapatalk
= 5.1.3📦
Tapatalk
Tapatalk
= 5.2.0📦
Tapatalk