CVE:CVE-2007-3198
CNNVD:CNNVD-200706-211
Maran PHP Blog (Maran Blog)中的comments.php文件存在跨站脚本攻击漏洞。远程攻击者可以借助id参数，注入任意的web脚本或HTML。
solution:Upgrade maran php_blog to a higher version than 2007-04-22,and avoid the version (,2007-04-22]