CVE-2006-2491 - Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly filtered when it is accessed using the $_SERVER["PHP_SELF"] variable

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly filtered when it is accessed using the $_SERVER["PHP_SELF"] variable

Published May 19, 2006

6.8

MEDIUM

CVSS 2.0

EPSS 2.75%

Description

Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly filtered when it is accessed using the $_SERVER["PHP_SELF"] variable.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://secunia.com/advisories/20149
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://securityreason.com/securityalert/725
third-party-advisoryx_refsource_SREASON
http://securityreason.com/securityalert/927
third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/25617
vdb-entryx_refsource_OSVDBExploit
http://www.osvdb.org/25618
vdb-entryx_refsource_OSVDBExploit
http://www.securityfocus.com/archive/1/434294/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/18012
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1853
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2491
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26518
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/20149		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://securityreason.com/securityalert/725		third-party-advisoryx_refsource_SREASON
http://securityreason.com/securityalert/927		third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/25617		vdb-entryx_refsource_OSVDBExploit
http://www.osvdb.org/25618		vdb-entryx_refsource_OSVDBExploit
http://www.securityfocus.com/archive/1/434294/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/18012		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1853		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2491		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26518		vdb-entryx_refsource_XF