GCVE - cpe:2.3:a:boastmachine:boastmachine:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:boastmachine:boastmachine:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/knadh/boastmachine`	purl2cpe	2026-06-01 10:18:21.192593

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-0422`	vulnerable	2026-06-08 04:50:11.026501	Details available SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Published: 2008-01-23T21:00:00.000Z Updated: 2024-08-07T07:46:54.460Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/4952 http://www.securityfocus.com/bid/32379 http://www.securityfocus.com/archive/1/486737/100/0/threaded http://www.securityfocus.com/bid/27369 http://www.securityfocus.com/archive/1/498521/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2491`	vulnerable	2026-06-08 04:49:06.894352	Details available Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly filtered when it is accessed using the $_SERVER["PHP_SELF"] variable. Published: 2006-05-19T23:00:00.000Z Updated: 2024-08-07T17:51:04.687Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/725 https://exchange.xforce.ibmcloud.com/vulnerabilities/26518 http://www.vupen.com/english/advisories/2006/1853 http://securityreason.com/securityalert/927 http://www.securityfocus.com/archive/1/434294/100/0/threaded	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.