Kailash Nadh Boastmachine — known CVE vulnerabilities

Every CVE whose affected-product data names Kailash Nadh Boastmachine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2006-2491 — CVSS 6.8 (medium): Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote…
• CVE-2006-3827 — CVSS 6.5 (medium): SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows…
• CVE-2006-3828 — CVSS 6.5 (medium): Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated…
• CVE-2006-3831 — CVSS 5.0 (medium): The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and…
• CVE-2006-3829 — CVSS 5.0 (medium): Cross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows…
• CVE-2006-3826 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allow remote attackers…
• CVE-2006-3830 — CVSS 4.0 (medium): The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated…
• CVE-2006-1841 — CVSS 2.6 (low): Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows…