cvedb.io
CVE-2017-14652
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2017-09-21T20:29:00.287 · Last modified 2026-06-17T01:06:34.233

Summary

SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent as part of the user registration process.

Affected products

tapatalk — tapatalk

Does this affect you?

Add your gear to cvedb and we'll alert you only when tapatalk ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.