CVE-2007-3131

CVE-2007-3131

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in add_comment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/25561 http://securityreason.com/securityalert/2783 https://exchange.xforce.ibmcloud.com/vulnerabilities/34753 http://www.securityfocus.com/archive/1/470673/100/0/threaded http://www.secvsn.com/content/Advisories/sr-060607-lightblog.html