CVE-2007-3198

medium

Description

Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/34812

http://www.vupen.com/english/advisories/2007/2148

http://www.secvsn.com/content/Advisories/sr-060607-maran.html

http://www.securityfocus.com/bid/30309

http://www.securityfocus.com/archive/1/494549/100/0/threaded

http://www.securityfocus.com/archive/1/471046/100/0/threaded

http://securityreason.com/securityalert/2797

http://secunia.com/advisories/25616

http://osvdb.org/35374

Details

Source: Mitre, NVD

Published: 2007-06-12

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N