CVE-2007-3198 Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the....
MediumCVSS 4.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maran php blog | <= 2007-04-22 | No fix listed |
References
- 35374 vdb-entry
- 25616 patch third-party-advisory vendor-advisory
- 2797 third-party-advisory
- 20070610 Maran Blog XSS vulnerability mailing-list
- 20080719 Maran PHP Blog Xss By Khashayar Fereidani mailing-list
- 24409 exploit patch vdb-entry
- 30309 vdb-entry
- www.secvsn.com vendor-advisory
- ADV-2007-2148 vdb-entry
- maranblog-comments-xss(34812) vdb-entry