How severe is CVE-2006-1841?

CVE-2006-1841 has a CVSS 2.0 base score of 2.6, rated low severity.

Is CVE-2006-1841 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (64th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-1841?

CVE-2006-1841 primarily affects Kailash Nadh Boastmachine. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2006-1841?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2006-1841 published?

CVE-2006-1841 was published on 2006-04-19 and last updated on 2026-06-16.

CVE-2006-1841

CVE-2006-1841 is a low-severity vulnerability in Kailash Nadh Boastmachine with a CVSS 2.0 base score of 2.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 2.0 base score 2.6)
EPSS exploit prediction: 1% (64th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Kailash Nadh Boastmachine
Published: 2006-04-19
Last modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field.

Frequently asked questions

What is CVE-2006-1841?: Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field.
How severe is CVE-2006-1841?: CVE-2006-1841 has a CVSS 2.0 base score of 2.6, rated low severity.
Is CVE-2006-1841 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (64th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-1841?: CVE-2006-1841 primarily affects Kailash Nadh Boastmachine. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2006-1841?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2006-1841 published?: CVE-2006-1841 was published on 2006-04-19 and last updated on 2026-06-16.

References

Affected products (4)

cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*
cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*
cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*
cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*

More vulnerabilities in Kailash Nadh Boastmachine

CVE-2006-2491 — Medium (CVSS 6.8): Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and…
CVE-2006-3828 — Medium (CVSS 6.5): Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote…
CVE-2006-3827 — Medium (CVSS 6.5): SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1…
CVE-2006-3829 — Medium (CVSS 5.0): Cross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine (formerly bMachine) 3.1…
CVE-2006-3831 — Medium (CVSS 5.0): The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for…
CVE-2006-3826 — Medium (CVSS 4.3): Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier…

All CVEs affecting Kailash Nadh Boastmachine →