CVE-2007-3198

Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Link	Resource
http://www.secvsn.com/content/Advisories/sr-060607-maran.html	Vendor Advisory
http://www.securityfocus.com/bid/24409	Exploit Patch
http://secunia.com/advisories/25616	Patch Vendor Advisory
http://securityreason.com/securityalert/2797
http://www.securityfocus.com/bid/30309
http://osvdb.org/35374
http://www.vupen.com/english/advisories/2007/2148
https://exchange.xforce.ibmcloud.com/vulnerabilities/34812
http://www.securityfocus.com/archive/1/494549/100/0/threaded
http://www.securityfocus.com/archive/1/471046/100/0/threaded

Configuration 1

cpe:2.3:a:maran:php_blog:*:*:*:*:*:*:*:*

---

Published : 2007-06-12 11:30

Updated : 2018-10-16 04:47

---

NVD link : CVE-2007-3198

Mitre link : CVE-2007-3198

No products.

NVD-CWE-Other