CVE-2007-3134

Atom PhotoBlog < 1.0.9 - Cross-Site Scripting via Comment Fields

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Your Name, (2) Your Homepage, and (3) Your Comment fields, when using "Approve Comments."

Exploits (1)

exploitdb WRITEUP VERIFIED

by Serapis.net · textwebappsphp

https://www.exploit-db.com/exploits/30161

View Code ZIP pw:eip

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/34767

Product x_refsource_misc

http://sourceforge.net/project/shownotes.php?group_id=186464&release_id=514101

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/25562

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/37046

Scores

EPSS 0.0046

EPSS Percentile 64.2%

Details

Status published

Products (1)

atom/photoblog < 1.0.9

Published Jun 08, 2007

Tracked Since Feb 18, 2026