Vulnerability Description
SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent as part of the user registration process.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tapatalk | Tapatalk | <= 4.5.7 |
Related Weaknesses (CWE)
References
- http://adrianhayter.com/exploits.phpExploitThird Party Advisory
- https://www.tapatalk.com/groups/tapatalksupport/tapatalk-for-mybb-plugin-releaseVendor Advisory
- http://adrianhayter.com/exploits.phpExploitThird Party Advisory
- https://www.tapatalk.com/groups/tapatalksupport/tapatalk-for-mybb-plugin-releaseVendor Advisory
FAQ
What is CVE-2017-14652?
CVE-2017-14652 is a vulnerability with a CVSS score of 9.8 (CRITICAL). SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encod...
How severe is CVE-2017-14652?
CVE-2017-14652 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-14652?
Check the references section above for vendor advisories and patch information. Affected products include: Tapatalk Tapatalk.