CVE-2006-3831
CVE-2006-3831 is a medium-severity vulnerability in Kailash Nadh Boastmachine with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 1% (69th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Kailash Nadh Boastmachine
- Published:
- Last modified:
Description
The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file.
Frequently asked questions
- What is CVE-2006-3831?
- The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file.
- How severe is CVE-2006-3831?
- CVE-2006-3831 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2006-3831 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-3831?
- CVE-2006-3831 affects Kailash Nadh Boastmachine. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2006-3831?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-3831 published?
- CVE-2006-3831 was published on 2006-07-25 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/21066
- http://securityreason.com/securityalert/1271
- http://securitytracker.com/id?1016515
- http://www.acid-root.new.fr/advisories/boastmachine.txt
- http://www.securityfocus.com/archive/1/440306/100/0/threaded
Affected products (1)
- cpe:2.3:a:kailash_nadh:boastmachine:*:*:*:*:*:*:*:*
More vulnerabilities in Kailash Nadh Boastmachine
- CVE-2006-2491 — Medium (CVSS 6.8): Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and…
- CVE-2006-3828 — Medium (CVSS 6.5): Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote…
- CVE-2006-3827 — Medium (CVSS 6.5): SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1…
- CVE-2006-3829 — Medium (CVSS 5.0): Cross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine (formerly bMachine) 3.1…
- CVE-2006-3826 — Medium (CVSS 4.3): Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier…
- CVE-2006-3830 — Medium (CVSS 4.0): The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows…