CVE:CVE-2006-2491
CNNVD:CNNVD-200605-348
BoastMachine (bMachine) 3.1及之前版本的(1) index.php和(2) bmc/admin.php当中存在跨站脚本攻击(XSS) 漏洞。  远程攻击者可以借助一个在使用$_SERVER["PHP_SELF"] 变量访问时未正确过滤的查询字符串，注入任意Web脚本或HTML。
solution:Upgrade boastmachine boastmachine to a higher version than 3.1,3.0,and avoid the version (,3.1],3.0; Upgrade kailash_nadh boastmachine to a higher version than 2.5,2.7,2.8,2.9b,and avoid the version 2.5,2.7,2.8,2.9b