How severe is CVE-2007-3426?

CVE-2007-3426 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2007-3426 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (78th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-3426?

CVE-2007-3426 affects Zoneo-soft Phptraffica. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2007-3426?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2007-3426 published?

CVE-2007-3426 was published on 2007-06-27 and last updated on 2026-06-16.

CVE-2007-3426

CVE-2007-3426 is a medium-severity vulnerability in Zoneo-soft Phptraffica with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 2% (78th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Zoneo-soft Phptraffica
Published: 2007-06-27
Last modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

Frequently asked questions

What is CVE-2007-3426?: Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
How severe is CVE-2007-3426?: CVE-2007-3426 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2007-3426 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (78th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-3426?: CVE-2007-3426 affects Zoneo-soft Phptraffica. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2007-3426?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2007-3426 published?: CVE-2007-3426 was published on 2007-06-27 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:zoneo-soft:phptraffica:*:*:*:*:*:*:*:*

More vulnerabilities in Zoneo-soft Phptraffica

CVE-2007-3647 — Critical (CVSS 10.0): The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass…
CVE-2014-8340 — High (CVSS 7.5): SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to…
CVE-2007-3427 — High (CVSS 7.5): SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary…
CVE-2007-3428 — High (CVSS 7.5): Multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have an unknown impact via…
CVE-2007-3425 — Medium (CVSS 5.0): Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include…
CVE-2015-2926 — Medium (CVSS 4.3): Cross-site scripting (XSS) vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and earlier allows remote…

All CVEs affecting Zoneo-soft Phptraffica →