Tapatalk plugin for vBulletin and Xenforo suffers from an open redirection vulnerability.
1102d8cadc59d011cd1380605c006eff6ef1b237843b1ff925e90e30e3fd7793Tapatalk Plugin for XenForo and vBulletin suffer of Open redirect.
Vendor: https://tapatalk.com
Dork: inurl: mobiquo/mobiquo.php
Plugin versions:
Tapatalk plugin for vBulletin: 5.2.2
Tapatalk plugin for Xenforo: <2.3.5
Description:
Tapatak Plugin allow to arbitrary redirect users to external websites
PoC:
https://www.example.com/mobiquo/mobiquo.php?welcome=1&referer=http%3A%2F%2Finforge.net%2F
How to fix:
Update the latest version.
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed