Vulnerabilities

TI-2008-00397 CVE-2008-0422 · GHSA-5x75-7qcc-g97p

SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier…

LOW 39

SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03271 Published 2008-01-23 No fix listed CWE-89

TI-2007-05204 CVE-2007-5417 · GHSA-cx3p-mp6p-65g8

Directory traversal vulnerability in index.php in boastMachine (aka bMachine) 2.8 allows…

LOW 29

Directory traversal vulnerability in index.php in boastMachine (aka bMachine) 2.8 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03422 Published 2007-10-12 No fix listed CWE-22

TI-2007-02838 CVE-2007-2932 · GHSA-hpx5-r3q5-52m2

Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote…

LOW 27

Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the blog parameter in a content search action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0447 Published 2007-05-31 No fix listed

TI-2007-02767 CVE-2007-2860 · GHSA-xjcq-phj7-g2fh

user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain…

LOW 31

user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by an edit_post action.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01137 Published 2007-05-24 No fix listed

TI-2006-02423 CVE-2006-2491 · GHSA-hr73-m8xf-r7x5

Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in…

LOW 35

Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02817 Published 2006-05-19 No fix listed

TI-2006-00124 CVE-2006-0131 · GHSA-6q36-rj3v-2f7f

boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct…

LOW 25

boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2) side_menu.php, which reveals the path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01212 Published 2006-01-09 No fix listed

TI-2005-01491 CVE-2005-1580 · GHSA-p63p-f4jm-qw85

users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can…

LOW 38

users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02688 Published 2005-05-14 No fix listed