VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 19, 2006· Updated Jun 16, 2026

CVE-2006-1841

CVE-2006-1841

Description

Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field.

Affected products

6
  • Kailash Nadh/Boastmachine5 versions
    cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*
    • (no CPE)range: <=2.9b
  • Kailash Nadh/bMachinellm-create
    Range: <=2.9b

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.

CVE-2006-1841 · VYPR