Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Tapatalk Clear all filters
TI-2014-01587 CVE-2014-2023 · GHSA-pvxc-738f-66pm

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x…

Priority MEDIUM 49

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubsc…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04145 Published 2017-10-26 No fix listed CWE-89
TI-2017-10748 CVE-2017-14652 · GHSA-qj97-4j39-w47x

SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before…

Priority MEDIUM 45

SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent as…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01683 Published 2017-09-21 No fix listed CWE-89
TI-2014-07246 CVE-2014-8870 · GHSA-9xv3-rrw4-9qm8

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk…

Priority LOW 29

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and co…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01268 Published 2015-01-15 No fix listed
TI-2014-07245 CVE-2014-8869 · GHSA-m8rh-p4v3-9rr7

Multiple cross-site scripting (XSS) vulnerabilities in mobiquo/smartbanner/welcome.php in…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01221 Published 2015-01-15 No fix listed CWE-79
TI-2014-04634 CVE-2014-5680 · GHSA-mxc4-mp3j-v426

The Tapatalk (aka com.quoord.tapatalkpro.activity) application 4.8.0 for Android does not…

Priority LOW 24

The Tapatalk (aka com.quoord.tapatalkpro.activity) application 4.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informa…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310