CVE-2007-3198

Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

• http://osvdb.org/35374
• http://secunia.com/advisories/25616Patch, Vendor Advisory
• http://securityreason.com/securityalert/2797
• http://www.securityfocus.com/archive/1/471046/100/0/threaded
• http://www.securityfocus.com/archive/1/494549/100/0/threaded
• http://www.securityfocus.com/bid/24409Exploit, Patch
• http://www.securityfocus.com/bid/30309
• http://www.secvsn.com/content/Advisories/sr-060607-maran.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2007/2148
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34812
• http://osvdb.org/35374
• http://secunia.com/advisories/25616Patch, Vendor Advisory
• http://securityreason.com/securityalert/2797
• http://www.securityfocus.com/archive/1/471046/100/0/threaded
• http://www.securityfocus.com/archive/1/494549/100/0/threaded
• http://www.securityfocus.com/bid/24409Exploit, Patch
• http://www.securityfocus.com/bid/30309
• http://www.secvsn.com/content/Advisories/sr-060607-maran.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2007/2148
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34812

Published

Jun 12, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3192admin/setup.php in Just For Fun Network Management System (J…
• CVE-2007-3193lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the c…
• CVE-2007-3194Multiple PHP remote file inclusion vulnerabilities in myBlog…9.8
• CVE-2007-3195Cross-site scripting (XSS) vulnerability in index.php in ERF…
• CVE-2007-3196SQL injection vulnerability in vBSupport.php in vSupport Int…
• CVE-2007-3197SQL injection vulnerability in vBSupport.php in vBSupport 1.…
• CVE-2007-3199Unrestricted file upload vulnerability in Link Request Conta…
• CVE-2007-3200NMASINST in Novell Modular Authentication Service (NMAS) 3.1…
• CVE-2007-3201Visual truncation vulnerability in Windows Privacy Tray (Win…
• CVE-2007-3202Cross-site scripting (XSS) vulnerability in the rich text ed…
• CVE-2007-3203Stack-based buffer overflow in smtpdll.dll in the SMTP servi…
• CVE-2007-3204SQL injection vulnerability in auth.php in Just For Fun Netw…