CVE-2007-3198

Опубликовано: 12 июн. 2007

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Ссылки

http://osvdb.org/35374
http://secunia.com/advisories/25616
Patch
Vendor Advisory
http://securityreason.com/securityalert/2797
http://www.securityfocus.com/archive/1/471046/100/0/threaded
http://www.securityfocus.com/archive/1/494549/100/0/threaded
http://www.securityfocus.com/bid/24409
Exploit
Patch
http://www.securityfocus.com/bid/30309
http://www.secvsn.com/content/Advisories/sr-060607-maran.html
Vendor Advisory
http://www.vupen.com/english/advisories/2007/2148
https://exchange.xforce.ibmcloud.com/vulnerabilities/34812
http://osvdb.org/35374
http://secunia.com/advisories/25616
Patch
Vendor Advisory
http://securityreason.com/securityalert/2797
http://www.securityfocus.com/archive/1/471046/100/0/threaded
http://www.securityfocus.com/archive/1/494549/100/0/threaded
http://www.securityfocus.com/bid/24409
Exploit
Patch
http://www.securityfocus.com/bid/30309
http://www.secvsn.com/content/Advisories/sr-060607-maran.html
Vendor Advisory
http://www.vupen.com/english/advisories/2007/2148
https://exchange.xforce.ibmcloud.com/vulnerabilities/34812

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:maran:php_blog:*:*:*:*:*:*:*:*

Версия до 2007-04-22 (включая)

EPSS

Процентиль: 94%

0.123

Средний

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-vrgq-6vpp-w7j5

github

почти 4 года назад