CVE-2006-1841

Description

Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25914

http://www.vupen.com/english/advisories/2006/1375

http://www.securityfocus.com/bid/17550

http://www.securityfocus.com/archive/1/431120/100/0/threaded

http://secunia.com/advisories/19711

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS