Miggo Logo
Miggo Vulnerability Database
→
CVE-2017-7391

CVE-2017-7391: Magmi XSS Vulnerability

6.1

CVSS Score
3.0

Basic Information

CVE ID
CVE-2017-7391
GHSA ID
GHSA-r8vh-cm9f-rc29
EPSS Score
0.92125%
CWE
CWE-79
Published
5/17/2022
Updated
9/14/2023
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
dweeves/magmicomposer<= 0.7.220.7.24

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability stems from unescaped output of the 'prefix' parameter in ajax_gettime.php. The GitHub commit a9566b1 shows the fix adds htmlspecialchars() around $_REQUEST['prefix'], confirming the vulnerable code was raw output of user input. The affected line directly echoes the parameter value into the response without sanitization, making it susceptible to XSS when malicious scripts are passed in the prefix parameter.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

* *ross-Sit* S*riptin* (XSS) w*s *is*ov*r** in M**mi *.*.**. T** vuln*r**ility *xists *u* to insu**i*i*nt *iltr*tion o* us*r-suppli** **t* (pr**ix) p*ss** to t** `m**mi-*it-m*st*r/m**mi/w**/*j*x_**ttim*.p*p` URL. *n *tt**k*r *oul* *x**ut* *r*itr*ry *

Reasoning

T** vuln*r**ility st*ms *rom un*s**p** output o* t** 'pr**ix' p*r*m*t*r in *j*x_**ttim*.p*p. T** *it*u* *ommit ******* s*ows t** *ix ***s *tmlsp**i*l***rs() *roun* $_R*QU*ST['pr**ix'], *on*irmin* t** vuln*r**l* *o** w*s r*w output o* us*r input. T**