CVE-2007-3198

MEDIO 4.3CVE-2007-3198 · Published 12/06/2007 · updated 16/06/2026

En resumen

CVE-2007-3198 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a php blog (maran).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.5%, mayor que el 84.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
php blog maran	`≤ 2007-04-22`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

References

osvdb.org/35374
secunia.com/advisories/25616 · Patch
securityreason.com/securityalert/2797
securityfocus.com/archive/1/471046/100/0/threaded
securityfocus.com/archive/1/494549/100/0/threaded
securityfocus.com/bid/24409 · Exploit
securityfocus.com/bid/30309
secvsn.com/content/Advisories/sr-060607-maran.html · Vendor Advisory
vupen.com/english/advisories/2007/2148
exchange.xforce.ibmcloud.com/vulnerabilities/34812

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free