Lucene search

[email protected]CVE-2014-2023

HistoryOct 26, 2017 - 8:29 p.m.

CVE-2014-2023

2017-10-2620:29:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2014-2023

sql injection

tapatalk plugin

vbulletin

remote attackers

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (2) unsubscribe_topic.php in mobiquo/functions/.

Affected configurations

NVD

Node

tapatalktapatalkMatch1.0.0vbulletin

tapatalktapatalkMatch1.0.1vbulletin

tapatalktapatalkMatch1.0.2vbulletin

tapatalktapatalkMatch1.1.0vbulletin

tapatalktapatalkMatch1.1.1vbulletin

tapatalktapatalkMatch1.1.2vbulletin

tapatalktapatalkMatch1.2.0vbulletin

tapatalktapatalkMatch1.2.1vbulletin

tapatalktapatalkMatch1.2.3vbulletin

tapatalktapatalkMatch1.2.6vbulletin

tapatalktapatalkMatch2.0vbulletin

tapatalktapatalkMatch3.1.2vbulletin

tapatalktapatalkMatch3.1.3vbulletin

tapatalktapatalkMatch3.1.4vbulletin

tapatalktapatalkMatch3.1.5vbulletin

tapatalktapatalkMatch3.2.0vbulletin

tapatalktapatalkMatch3.9.0vbulletin

tapatalktapatalkMatch3.9.1vbulletin

tapatalktapatalkMatch3.9.2vbulletin

tapatalktapatalkMatch3.9.3vbulletin

tapatalktapatalkMatch4.0.0vbulletin

tapatalktapatalkMatch4.1.0vbulletin

tapatalktapatalkMatch4.2.0vbulletin

tapatalktapatalkMatch4.2.1vbulletin

tapatalktapatalkMatch4.3.0vbulletin

tapatalktapatalkMatch4.3.1vbulletin

tapatalktapatalkMatch4.4.0vbulletin

tapatalktapatalkMatch4.5.0vbulletin

tapatalktapatalkMatch4.5.1vbulletin

tapatalktapatalkMatch4.5.2vbulletin

tapatalktapatalkMatch4.6.0vbulletin

tapatalktapatalkMatch4.7.0vbulletin

tapatalktapatalkMatch4.7.1vbulletin

tapatalktapatalkMatch4.7.2vbulletin

tapatalktapatalkMatch4.8.0vbulletin

tapatalktapatalkMatch4.8.1vbulletin

tapatalktapatalkMatch4.9.0vbulletin

tapatalktapatalkMatch5.0.0vbulletin

tapatalktapatalkMatch5.0.1vbulletin

tapatalktapatalkMatch5.1.0vbulletin

tapatalktapatalkMatch5.1.1vbulletin

tapatalktapatalkMatch5.1.2vbulletin

tapatalktapatalkMatch5.1.3vbulletin

tapatalktapatalkMatch5.2.0vbulletin

tapatalktapatalkMatch5.2.1vbulletin

CPENameOperatorVersion
tapatalk:tapatalktapatalkeq1.0.0
tapatalk:tapatalktapatalkeq1.0.1
tapatalk:tapatalktapatalkeq1.0.2
tapatalk:tapatalktapatalkeq1.1.0
tapatalk:tapatalktapatalkeq1.1.1
tapatalk:tapatalktapatalkeq1.1.2
tapatalk:tapatalktapatalkeq1.2.0
tapatalk:tapatalktapatalkeq1.2.1
tapatalk:tapatalktapatalkeq1.2.3
tapatalk:tapatalktapatalkeq1.2.6

CPE	Name	Operator	Version
tapatalk:tapatalk	tapatalk	eq	1.0.0
tapatalk:tapatalk	tapatalk	eq	1.0.1
tapatalk:tapatalk	tapatalk	eq	1.0.2
tapatalk:tapatalk	tapatalk	eq	1.1.0
tapatalk:tapatalk	tapatalk	eq	1.1.1
tapatalk:tapatalk	tapatalk	eq	1.1.2
tapatalk:tapatalk	tapatalk	eq	1.2.0
tapatalk:tapatalk	tapatalk	eq	1.2.1
tapatalk:tapatalk	tapatalk	eq	1.2.3
tapatalk:tapatalk	tapatalk	eq	1.2.6

Rows per page:

1-10 of 451

References

packetstormsecurity.com/files/128854/vBulletin-4.x-Tapatalk-Blind-SQL-Injection.html

seclists.org/fulldisclosure/2014/Oct/57

www.exploit-db.com/exploits/35102

www.securityfocus.com/bid/70418

github.com/tintinweb/pub/tree/master/pocs/cve-2014-2023

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON

Related for CVE-2014-2023

packetstorm3 prion1 cvelist1 nvd1 openvas1 exploitpack2 exploitdb2