VULNERABILITY INTELLIGENCE

CVE-2006-3827

CVSS score6.5 MEDIUM
EPSS probability1.24%
CISA KEVNot currently listed
Published2006-07-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the blog parameter.

Primary references