Vulnerability Details : CVE-2006-3826

Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user_login, (2) full_name, and (3) URL parameters in register.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via the (4) cat_list and (5) key parameters in a certain portion of the admin interface.

Vulnerability category: Cross site scripting (XSS)

Published 2006-07-25 13:22:00

Updated 2018-10-17 21:31:40

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2006-3826

Probability of exploitation activity in the next 30 days: 0.81%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 80 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2006-3826

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	[email protected]
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

References for CVE-2006-3826

Products affected by CVE-2006-3826

Kailash Nadh » Boastmachine » Version: 2.9b
cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*
Matching versions
Kailash Nadh » Boastmachine » Version: 2.7
cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*
Matching versions
Kailash Nadh » Boastmachine » Version: 2.8
cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*
Matching versions
Kailash Nadh » Boastmachine » Version: 2.5
cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*
Matching versions
Kailash Nadh » Boastmachine » Version: 3.1
cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*
Matching versions