Unrated severityNVD Advisory· Published Jul 25, 2006· Updated Jun 16, 2026
CVE-2006-3826
CVE-2006-3826
Description
Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user_login, (2) full_name, and (3) URL parameters in register.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via the (4) cat_list and (5) key parameters in a certain portion of the admin interface.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*
- cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*
- cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*
- (no CPE)range: <=3.1
Patches
Vulnerability mechanics
References
7- www.acid-root.new.fr/advisories/boastmachine.txtnvdExploit
- secunia.com/advisories/21066nvdVendor Advisory
- securityreason.com/securityalert/1252nvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/440306/100/0/threadednvd
- www.vupen.com/english/advisories/2006/2849nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27771nvd
News mentions
0No linked articles in our index yet.