Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (2) unsubscribe_topic.php in mobiquo/functions/.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-10-26T20:00:00
Updated: 2024-08-06T09:58:16.312Z
Reserved: 2014-02-19T00:00:00
Link: CVE-2014-2023
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-10-26T20:29:00.373
Modified: 2024-11-21T02:05:28.823
Link: CVE-2014-2023
Redhat
No data.