CVE-2017-7626

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-7626
The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method).

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://extensions.joomla.org/extension/smart-related-articles/ Not Applicable
https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f Issue Tracking Patch Third Party Advisory
https://vel.joomla.org/live-vel/1952-smart-related-articles-1-1-sql-injection Third Party Advisory
https://extensions.joomla.org/extension/smart-related-articles/ Not Applicable
https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f Issue Tracking Patch Third Party Advisory
https://vel.joomla.org/live-vel/1952-smart-related-articles-1-1-sql-injection Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:smart_related_articles_project:smart_related_articles:1.1:*:*:*:*:joomla\!:*:*
History

21 Nov 2024, 03:32

Type Values Removed Values Added
References () https://extensions.joomla.org/extension/smart-related-articles/ - Not Applicable () https://extensions.joomla.org/extension/smart-related-articles/ - Not Applicable
References () https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f - Issue Tracking, Patch, Third Party Advisory () https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f - Issue Tracking, Patch, Third Party Advisory
References () https://vel.joomla.org/live-vel/1952-smart-related-articles-1-1-sql-injection - Third Party Advisory () https://vel.joomla.org/live-vel/1952-smart-related-articles-1-1-sql-injection - Third Party Advisory
Information

Published : 2017-04-13 03:59

Updated : 2025-04-20 01:37

NVD link : CVE-2017-7626

Mitre link : CVE-2017-7626

CVE.ORG link : CVE-2017-7626

JSON object : View

Products Affected

smart_related_articles_project

  • smart_related_articles
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')