Vulnerability Details : CVE-2006-3827

SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the blog parameter.

Vulnerability category: Sql Injection

Published 2006-07-25 13:22:00

Updated 2018-10-17 21:31:41

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2006-3827

Probability of exploitation activity in the next 30 days: 0.33%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 67 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2006-3827

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P	8.0	6.4	nvd@nist.gov
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2006-3827

Products affected by CVE-2006-3827

Kailash Nadh » Boastmachine » Version: 2.9b
cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*
Matching versions
Kailash Nadh » Boastmachine » Version: 2.7
cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*
Matching versions
Kailash Nadh » Boastmachine » Version: 2.8
cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*
Matching versions
Kailash Nadh » Boastmachine » Version: 2.5
cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*
Matching versions
Kailash Nadh » Boastmachine » Version: 3.1
cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*
Matching versions