Boastmachine Security Vulnerabilities and Issues — Boastmachine CVE List

Lucene search

Kailash NadhBoastmachine

3 matches found

CVE•added 2006/05/19 11:2 p.m.•38 views

CVE-2006-2491

Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly filtered when it is accessed using the $_SERVER["PHP_SELF"] variable.

6.8CVSS5.7AI score0.09542EPSS

CVE•added 2006/07/25 1:22 p.m.•33 views

CVE-2006-3828

Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, "UNION," and "SELECT," which are not filtered by...

6.5CVSS7.7AI score0.00306EPSS

CVE•added 2006/07/25 1:22 p.m.•31 views

CVE-2006-3827

SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the blog parameter.

6.5CVSS8.3AI score0.00669EPSS