CVE-2007-3198

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.5%

from disclosure to weapon405 days

Published on NVDJun 12

1st PoC+405d

exploitation probability

2.5%top 17% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/32090

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/35374 http://secunia.com/advisories/25616 http://securityreason.com/securityalert/2797 https://exchange.xforce.ibmcloud.com/vulnerabilities/34812 http://www.securityfocus.com/archive/1/471046/100/0/threaded http://www.securityfocus.com/archive/1/494549/100/0/threaded http://www.securityfocus.com/bid/24409 http://www.securityfocus.com/bid/30309 http://www.secvsn.com/content/Advisories/sr-060607-maran.html http://www.vupen.com/english/advisories/2007/2148