CVE-2006-3828 in boastMachine
要約 (英語)
Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, "UNION," and "SELECT," which are not filtered by the product, which only checks for "insert," "delete," "update," and "replace."
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
予約する
2006年07月24日
公開
2006年07月25日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 31495 | Kailash Nadh boastMachine SQLインジェクション | 89 | 概念実証 | 未定義 | CVE-2006-3828 |