Unrated severityNVD Advisory· Published Jul 25, 2006· Updated Jun 16, 2026
CVE-2006-3827
CVE-2006-3827
Description
SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the blog parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*
- cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*
- cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*
- (no CPE)range: <=3.1
Patches
Vulnerability mechanics
References
7- www.acid-root.new.fr/advisories/boastmachine.txtnvdExploit
- secunia.com/advisories/21066nvdVendor Advisory
- securityreason.com/securityalert/1252nvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/440306/100/0/threadednvd
- www.vupen.com/english/advisories/2006/2849nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27769nvd
News mentions
0No linked articles in our index yet.