{"api_version":"1","generated_at":"2026-07-23T11:07:42+00:00","cve":"CVE-2014-2023","urls":{"html":"https://cve.report/CVE-2014-2023","api":"https://cve.report/api/cve/CVE-2014-2023.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-2023","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-2023"},"summary":{"title":"CVE-2014-2023","description":"Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (2) unsubscribe_topic.php in mobiquo/functions/.","state":"PUBLISHED","assigner":"mitre","published_at":"2017-10-26 20:29:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://packetstormsecurity.com/files/128854/vBulletin-4.x-Tapatalk-Blind-SQL-Injection.html","name":"http://packetstormsecurity.com/files/128854/vBulletin-4.x-Tapatalk-Blind-SQL-Injection.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"vBulletin 4.x Tapatalk Blind SQL Injection ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2014-2023","name":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2014-2023","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"pub/pocs/cve-2014-2023 at master · tintinweb/pub · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/35102","name":"http://www.exploit-db.com/exploits/35102","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"vBulletin Tapatalk - Blind SQL Injection","mime":"text/x-python","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2014/Oct/57","name":"http://seclists.org/fulldisclosure/2014/Oct/57","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"Full Disclosure: CVE-2014-2023 - Tapatalk for vBulletin 4.x - multiple blind\tsql injection (pre-auth)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/70418","name":"http://www.securityfocus.com/bid/70418","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Tapatalk for vBulletin CVE-2014-2023 Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2023","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2023","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"1.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"1.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"1.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"1.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"1.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"1.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"1.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"1.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"3.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"3.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"3.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"3.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"3.9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"3.9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"3.9.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"3.9.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.8.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"4.9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"5.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"5.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"5.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"5.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"5.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"5.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"5.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2023","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tapatalk","cpe5":"tapatalk","cpe6":"5.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"vbulletin","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:58:16.312Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"70418","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/70418"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/128854/vBulletin-4.x-Tapatalk-Blind-SQL-Injection.html"},{"name":"20141013 CVE-2014-2023 - Tapatalk for vBulletin 4.x - multiple blind sql injection (pre-auth)","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2014/Oct/57"},{"name":"35102","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/35102"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2014-2023"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-10-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (2) unsubscribe_topic.php in mobiquo/functions/."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-10-26T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"70418","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/70418"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/128854/vBulletin-4.x-Tapatalk-Blind-SQL-Injection.html"},{"name":"20141013 CVE-2014-2023 - Tapatalk for vBulletin 4.x - multiple blind sql injection (pre-auth)","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2014/Oct/57"},{"name":"35102","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/35102"},{"tags":["x_refsource_MISC"],"url":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2014-2023"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2014-2023","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (2) unsubscribe_topic.php in mobiquo/functions/."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"70418","refsource":"BID","url":"http://www.securityfocus.com/bid/70418"},{"name":"http://packetstormsecurity.com/files/128854/vBulletin-4.x-Tapatalk-Blind-SQL-Injection.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/128854/vBulletin-4.x-Tapatalk-Blind-SQL-Injection.html"},{"name":"20141013 CVE-2014-2023 - Tapatalk for vBulletin 4.x - multiple blind sql injection (pre-auth)","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2014/Oct/57"},{"name":"35102","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/35102"},{"name":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2014-2023","refsource":"MISC","url":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2014-2023"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2014-2023","datePublished":"2017-10-26T20:00:00.000Z","dateReserved":"2014-02-19T00:00:00.000Z","dateUpdated":"2024-08-06T09:58:16.312Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-10-26 20:29:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:1.0.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"2336C0BA-7B41-4D35-9C0F-383958F0C659"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:1.0.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"1A05E63D-BB44-4886-A073-AD338408512B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:1.0.2:*:*:*:*:vbulletin:*:*","matchCriteriaId":"A912E571-9417-4D71-BDE5-11D8825CAD74"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:1.1.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"18EEF2B7-0D43-4BD9-87D6-A3838994F9BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:1.1.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"C881ED77-910E-4DE1-8129-EBEF1E71995C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:1.1.2:*:*:*:*:vbulletin:*:*","matchCriteriaId":"22B667B2-78F0-447A-BAEA-C5BE25BD51A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:1.2.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"C9709C3C-AF1F-47B6-8D69-8227BB67AF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:1.2.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"824577D2-5F25-4BB4-8AE2-D159740DCF59"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:1.2.3:*:*:*:*:vbulletin:*:*","matchCriteriaId":"22D7C260-096A-4822-8FF8-2638CD6C1AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:1.2.6:*:*:*:*:vbulletin:*:*","matchCriteriaId":"086FDBE1-EB0C-450D-A263-88A97E520327"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:2.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"2BB601A2-4895-435B-86F2-98721BD4314D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:3.1.2:*:*:*:*:vbulletin:*:*","matchCriteriaId":"F3BFF0A4-119B-4E60-8B29-46B4A97F63C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:3.1.3:*:*:*:*:vbulletin:*:*","matchCriteriaId":"E4F766DC-BD0C-4949-99F1-4463CC0A173F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:3.1.4:*:*:*:*:vbulletin:*:*","matchCriteriaId":"DF73AE81-DE04-45E4-931E-9940B0BF3685"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:3.1.5:*:*:*:*:vbulletin:*:*","matchCriteriaId":"A58E5657-B27B-413E-A9C6-560B29458D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:3.2.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"8C288926-04C4-44AE-A7F6-537D464B3CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:3.9.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"D64DCD10-8D6B-483D-9C7F-5B91A7E27846"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:3.9.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"5DA7372D-032B-4CBD-90BB-A9A0101629F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:3.9.2:*:*:*:*:vbulletin:*:*","matchCriteriaId":"9A06C9A0-0F46-49FC-B145-39BDFEEA5F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:3.9.3:*:*:*:*:vbulletin:*:*","matchCriteriaId":"A4040EAD-54CD-4D38-A69C-360E1791DDB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.0.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"937A8E5A-1002-4036-BF05-9C1A03DE1C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.1.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"445B30A5-123F-4381-B462-0E9D0BC1E8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.2.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"F63F8CB1-929F-44E0-8E95-9D41CE38CD6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.2.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"AA4EB9E1-379E-4ADA-ACA6-225B45D9260E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.3.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"DDC0DDD4-4983-4094-A722-EC8512FDC15E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.3.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"BC5A0D0F-FFE4-4260-8951-5E78594EF165"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.4.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"212916B4-48F4-4F9A-A0C7-2E5F8B8D8EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.5.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"B86F3188-8A1B-4CA0-8D88-C4566FD85FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.5.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"92A75CA5-891D-4903-A0CE-25BA4A6601D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.5.2:*:*:*:*:vbulletin:*:*","matchCriteriaId":"81A5D7AE-99CA-4003-845D-C641049E56BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.6.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"9FCD3D84-14A2-4B28-80B4-A92430179460"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.7.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"3D535171-DA84-4C88-8746-036B27CB8206"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.7.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"0A9E8E22-EDEE-4E3F-91DB-36AB85FEBBE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.7.2:*:*:*:*:vbulletin:*:*","matchCriteriaId":"2212EDBB-9950-4420-9636-04AA6318965B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.8.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"BE7F30C7-3308-45CB-A0AE-B78009B7F29A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.8.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"7DD12814-CBB8-4DDE-A787-2E852140C22F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:4.9.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"64F20A0D-9CD3-49EC-A730-0A052B1885A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:5.0.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"56BB5C06-88BA-41F6-AB3A-14F4CA5AFBC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:5.0.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"57A4CD2A-EB67-4F17-AF05-1456BFB0EB3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:5.1.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"97DB6E2A-43EA-4B6A-B12B-C805E3CB04CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:5.1.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"C4175C89-C1D2-484B-B73E-9CCDC73C2301"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:5.1.2:*:*:*:*:vbulletin:*:*","matchCriteriaId":"E5AE4726-CE29-4B22-A501-9401382ECCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:5.1.3:*:*:*:*:vbulletin:*:*","matchCriteriaId":"E70A9367-D6B5-4C02-97B2-40FBB70896C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:5.2.0:*:*:*:*:vbulletin:*:*","matchCriteriaId":"2CF403E5-6314-4E0E-8B3A-5E0AAD1F1FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tapatalk:tapatalk:5.2.1:*:*:*:*:vbulletin:*:*","matchCriteriaId":"07548438-18E7-4FC7-A781-B58E076ED7D6"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"2023","Ordinal":"1","Title":"CVE-2014-2023","CVE":"CVE-2014-2023","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"2023","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (2) unsubscribe_topic.php in mobiquo/functions/.","Type":"Description","Title":"CVE-2014-2023"},{"CveYear":"2014","CveId":"2023","Ordinal":"2","NoteData":"2017-10-26","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"2023","Ordinal":"3","NoteData":"2017-10-26","Type":"Other","Title":"Modified"}]}}}