Lucene search

K
nvd[email protected]NVD:CVE-2014-8870
HistoryJan 15, 2015 - 3:59 p.m.

CVE-2014-8870

2015-01-1515:59:16
web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the board_url parameter.

Affected configurations

NVD
Node
tapatalktapatalkMatch1.0.0wotlab_burning_board
OR
tapatalktapatalkMatch1.0.1wotlab_burning_board
OR
tapatalktapatalkMatch1.0.2wotlab_burning_board
OR
tapatalktapatalkMatch1.1.0wotlab_burning_board
OR
tapatalktapatalkMatch1.1.1wotlab_burning_board

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%