VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 25, 2006· Updated Apr 16, 2026

CVE-2006-3828

CVE-2006-3828

Description

Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, "UNION," and "SELECT," which are not filtered by the product, which only checks for "insert," "delete," "update," and "replace."

Affected products

5
  • Kailash Nadh/Boastmachine5 versions
    cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.