VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 25, 2006· Updated Jun 16, 2026

CVE-2006-3828

CVE-2006-3828

Description

Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, "UNION," and "SELECT," which are not filtered by the product, which only checks for "insert," "delete," "update," and "replace."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Kailash Nadh/Boastmachine6 versions
    cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*
    • cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*
    • (no CPE)range: <=3.1

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.