CVE-2014-8870

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2015-01-15 · updated 2026-06-17

Description

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the board_url parameter.

Affected products

Tapatalk: 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1

References

http://seclists.org/fulldisclosure/2015/Jan/32
http://www.securityfocus.com/archive/1/534450/100/0/threaded
http://www.securityfocus.com/bid/71998
http://seclists.org/fulldisclosure/2015/Jan/32
http://www.securityfocus.com/archive/1/534450/100/0/threaded
http://www.securityfocus.com/bid/71998

Get alerted when CVE-2014-8870 or the next vulnerability affects your stack