Approved changes feed: RSS · Atom

cpe:2.3:a:boastmachine:boastmachine:3.0:*:platinum:*:*:*:*:*

part: a version: 3.0 update: *

VendorBoastmachine (8034d58e-411f-5205-82e6-1fc074f913c6)
ProductBoastmachine (b96032c7-e26e-5916-a78d-c6cec24fa452)
Editionplatinum
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/knadh/boastmachine purl2cpe 2026-06-01 10:18:21.194586

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-2860 vulnerable 2026-06-08 04:49:46.306300 Details available
user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by an edit_post action.
Published: 2007-05-24T19:00:00.000Z
Updated: 2024-08-07T13:57:54.668Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2491 vulnerable 2026-06-08 04:49:06.894902 Details available
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly filtered when it is accessed using the $_SERVER["PHP_SELF"] variable.
Published: 2006-05-19T23:00:00.000Z
Updated: 2024-08-07T17:51:04.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1580 vulnerable 2026-06-08 04:48:26.971026 Details available
users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code.
Published: 2005-05-14T04:00:00.000Z
Updated: 2024-09-16T22:35:17.427Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.