Vulnerabilities > CVE-2006-3829 - Cross-Site Request Forgery vulnerability in Boastmachine
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Cross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote attackers to perform unauthorized actions as an administrator and delete arbitrary user accounts via a delete_user action.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 5 |