CVE-2007-3973

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.8%

from disclosure to weapon51 days

Published on NVDJul 25

1st PoC+51d

exploitation probability

2.8%top 15% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, or the (2) search parameter or (3) theme cookie to (b) recherche.php.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4211 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4408

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/38557 http://osvdb.org/38558 http://secunia.com/advisories/26165 http://securityreason.com/securityalert/2919 https://exchange.xforce.ibmcloud.com/vulnerabilities/35551 https://exchange.xforce.ibmcloud.com/vulnerabilities/35556 https://www.exploit-db.com/exploits/4211 http://www.securityfocus.com/archive/1/474320/100/0/threaded http://www.securityfocus.com/bid/24991 http://www.vupen.com/english/advisories/2007/2611