CVE-2006-3828

Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL…

published July 25, 2006

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, "UNION," and "SELECT," which are not filtered by the product, which only checks for "insert," "delete," "update," and "replace."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01205 · 67.9th percentile
Published
2006-07-25T00:00Z
EPSS history
Timeline
  • 25 JUL 00:00Z
    Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL…
    cvelistv5