Lucene search

K
packetstormRedteam-pentesting.dePACKETSTORM:129926
HistoryJan 13, 2015 - 12:00 a.m.

WoltLab Burning Board 4.0 Tapatalk Open Redirect

2015-01-1300:00:00
redteam-pentesting.de
packetstormsecurity.com
28

0.003 Low

EPSS

Percentile

68.3%

`The Tapatalk Plugin com.tapatalk.wbb4 for WoltLab Burning Board 4.0 prior to  
version 1.1.2 allowed to redirect users to arbitrary URLs. This was possible by  
specifying the target URL in the URL parameter board_url in URLs like the  
following:  
  
http://www.example.com/mobiquo/smartbanner/welcome.php?board_url=https://www.redteam-pentesting.de  
  
CVE-2014-8870 was assigned to this issue.  
  
--   
RedTeam Pentesting GmbH Tel.: +49 241 510081-0  
Dennewartstr. 25-27 Fax : +49 241 510081-99  
52068 Aachen https://www.redteam-pentesting.de  
Germany Registergericht: Aachen HRB 14004  
Geschäftsführer: Patrick Hof, Jens Liebchen  
`

0.003 Low

EPSS

Percentile

68.3%

Related for PACKETSTORM:129926