CVE-2006-3826

no score yetEPSS 1.4%

kailash nadh boastmachine: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user_login, (2) full_name, and (3) URL parameters in register.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via the (4) cat_list and (5) key parameters in a certain portion of the admin interface.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-11-01)
Published: 2006-07-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

kailash_nadh:boastmachine

References

http://secunia.com/advisories/21066
http://securityreason.com/securityalert/1252
http://securitytracker.com/id?1016515
http://www.acid-root.new.fr/advisories/boastmachine.txt
http://www.securityfocus.com/archive/1/440306/100/0/threaded

Check your stack JSON