CVE-2007-3973

JBlog 1.0 - Cross-Site Scripting via id Parameter or search Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2007-3973. PoCs published by s4mi.

AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in JBlog 1.0, including XSS, cookie manipulation, and privilege escalation. It allows an attacker to create an admin account, manipulate cookies, and execute arbitrary JavaScript.

Description

Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, or the (2) search parameter or (3) theme cookie to (b) recherche.php.

Exploits (2)

exploitdb WORKING POC VERIFIED
by s4mi · htmlwebappsphp
https://www.exploit-db.com/exploits/4211

This exploit demonstrates multiple vulnerabilities in JBlog 1.0, including XSS, cookie manipulation, and privilege escalation. It allows an attacker to create an admin account, manipulate cookies, and execute arbitrary JavaScript.

Classification
Working Poc 90%
Attack Type
Xss | Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: JBlog 1.0
No auth needed
Prerequisites: Access to the target JBlog installation
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC
perlwebappsphp
https://www.exploit-db.com/exploits/4408

This Perl script exploits a remote SQL injection vulnerability in JBlog 1.0 by injecting a UNION-based payload into the 'id' parameter, extracting admin credentials from the 'auteur' table. It sends a crafted HTTP GET request to retrieve the username and password hash.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: JBlog 1.0
No auth needed
Prerequisites: Target must be running JBlog 1.0 · Remote access to the vulnerable endpoint
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (10)

Core 10
Core References
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/2919
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26165
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/38558
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/38557
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/474320/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35551
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24991
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4211
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2611
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35556

Scores

EPSS 0.2081
EPSS Percentile 95.8%

Details

Status published
Products (1)
jblog/jblog 1.0
Published Jul 25, 2007
Tracked Since Feb 18, 2026