Lucene search

MitreCVE-2007-3198

HistoryJun 12, 2007 - 11:30 p.m.

CVE-2007-3198

2007-06-1223:30:00

mitre

web.nvd.nist.gov

cve-2007-3198

cross-site scripting

xss

vulnerability

maran php blog

comments.php

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.011

Percentile

85.0%

JSON

Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected configurations

Nvd

Node

maranphp_blogRange≤2007-04-22

VendorProductVersionCPE
maranphp_blog*cpe:2.3:a:maran:php_blog:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
maran	php_blog	*	cpe:2.3:a:maran:php_blog::::::::

References

osvdb.org/35374

secunia.com/advisories/25616

securityreason.com/securityalert/2797

www.securityfocus.com/archive/1/471046/100/0/threaded

www.securityfocus.com/archive/1/494549/100/0/threaded

www.securityfocus.com/bid/24409

www.securityfocus.com/bid/30309

www.secvsn.com/content/Advisories/sr-060607-maran.html

www.vupen.com/english/advisories/2007/2148

exchange.xforce.ibmcloud.com/vulnerabilities/34812

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.011

Percentile

85.0%

JSON

Related for CVE-2007-3198