CVE-2006-2491

🗓️ 19 May 2006 23:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

CVE-2006-2491 Cross-site scripting vulnerability in BoastMachin

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2006-2491	19 May 200623:00	–	cvelist
Exploit DB	BoastMachine 3.1 - 'admin.php' Cross-Site Scripting	17 May 200600:00	–	exploitdb
EUVD	EUVD-2006-2491	19 May 200623:00	–	euvd
NVD	CVE-2006-2491	19 May 200623:02	–	nvd
Prion	Cross site scripting	19 May 200623:02	–	prion
Rapid7 Vulnerability Database (full)	CVE-2006-2491: Undefined Security Weakness	19 May 200600:00	–	rapid7

NVD

Node

OR

boastmachine boastmachineRange≤3.1

boastmachine boastmachineMatch3.0platinum

kailash_nadh boastmachineMatch2.5

kailash_nadh boastmachineMatch2.7

kailash_nadh boastmachineMatch2.8

kailash_nadh boastmachineMatch2.9b

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/26518
osvdb	www.osvdb.org/25617
vupen	www.vupen.com/english/advisories/2006/1853
secunia	www.secunia.com/advisories/20149
osvdb	www.osvdb.org/25618
securityfocus	www.securityfocus.com/archive/1/434294/100/0/threaded
securityfocus	www.securityfocus.com/bid/18012
securityreason	www.securityreason.com/securityalert/725
securityreason	www.securityreason.com/securityalert/927

Parameter	Position	Path	Description	CWE
PHP_SELF	query param	index.php	Cross-site scripting (XSS) vulnerability in index.php where user-supplied input via the query string is not properly filtered when accessed using the $_SERVER["PHP_SELF"] variable.	CWE-79
PHP_SELF	query param	bmc/admin.php	Cross-site scripting (XSS) vulnerability in bmc/admin.php where user-supplied input via the query string is not properly filtered when accessed using the $_SERVER["PHP_SELF"] variable.	CWE-79

16 Jun 2026 22:25Current

5.7Medium risk

Vulners AI Score5.7

CVSS 26.8

EPSS0.02752

cve 2006 2491 cross-site scripting xss vulnerability boastmachine bmachine web script html php_self filtering