boastmachine records
7 published records for vendor boastmachine.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2008-0422Proof of concept | SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execute arbitrary SQL commboastmachine · boastmachine · CWE-89 | High7.5 | — | 3.3% | Jan 23, 2008 |
31Monitor | CVE-2005-1580No exploit | users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execuboastmachine · boastmachine | High7.5 | — | 2.7% | May 11, 2005 |
28Monitor | CVE-2006-2491Proof of concept | Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attboastmachine · boastmachine | Medium6.8 | — | 2.8% | May 19, 2006 |
26Monitor | CVE-2007-2860No exploit | user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by aboastmachine · boastmachine | Medium6.5 | — | 1.1% | May 24, 2007 |
21Monitor | CVE-2007-5417Proof of concept | Directory traversal vulnerability in index.php in boastMachine (aka bMachine) 2.8 allows remote attackers to read arbitrary files via a ..boastmachine · boastmachine · CWE-22 | Medium5.0 | — | 3.4% | Oct 12, 2007 |
20Monitor | CVE-2006-0131No exploit | boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2) side_menu.php, whichboastmachine · boastmachine | Medium5.0 | — | 1.2% | Jan 9, 2006 |
18Monitor | CVE-2007-2932Proof of concept | Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via theboastmachine · boastmachine | Medium4.3 | — | 4.5% | May 30, 2007 |
- CVE-2008-042231Monitor
SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execute arbitrary SQL comm
HighCVSS 7.5Proof of conceptEPSS 3%boastmachine · boastmachineJan 23, 2008
- CVE-2005-158031Monitor
users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execu
HighCVSS 7.5No exploitEPSS 3%boastmachine · boastmachineMay 11, 2005
- CVE-2006-249128Monitor
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote att
MediumCVSS 6.8Proof of conceptEPSS 3%boastmachine · boastmachineMay 19, 2006
- CVE-2007-286026Monitor
user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by a
MediumCVSS 6.5No exploitEPSS 1%boastmachine · boastmachineMay 24, 2007
- CVE-2007-541721Monitor
Directory traversal vulnerability in index.php in boastMachine (aka bMachine) 2.8 allows remote attackers to read arbitrary files via a ..
MediumCVSS 5.0Proof of conceptEPSS 3%boastmachine · boastmachineOct 12, 2007
- CVE-2006-013120Monitor
boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2) side_menu.php, which
MediumCVSS 5.0No exploitEPSS 1%boastmachine · boastmachineJan 9, 2006
- CVE-2007-293218Monitor
Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the
MediumCVSS 4.3Proof of conceptEPSS 4%boastmachine · boastmachineMay 30, 2007