CVE-2017-14652

CRITICAL 9.8CVE-2017-14652 · Published 21/09/2017 · updated 17/06/2026

In short

CVE-2017-14652 is a CRITICAL (CVSS 9.8) vulnerability affecting tapatalk (tapatalk).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tapatalk tapatalk	`≤ 4.5.7`	No fix yet

Description

SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent as part of the user registration process.

References

adrianhayter.com/exploits.php · Exploit
tapatalk.com/groups/tapatalksupport/tapatalk-for-mybb-plugin-release-announcement-and--t5877-s50.html · Vendor Advisory

More vulnerabilities in tapatalk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tapatalk

≤ 4.5.7

No fix yet

More vulnerabilities in tapatalk

See all →