CVE-2006-3828: Kailash Nadh Boastmachine

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, "UNION," and "SELECT," which are not filtered by the product, which only checks for "insert," "delete," "update," and "replace."

Affected products

• Kailash Nadh Boastmachine: version 2.5 only; version 2.7 only; version 2.8 only; version 2.9b only; version 3.1 only

Published 2006-07-25. Last modified 2026-06-16.