PatchTheCVEboastmachine vulnerabilities and fixes
Recent CVEs affecting boastmachine, with upgrade or downgrade steps. 14 tracked.
boastmachine has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2008-01-23. Highest priority: CVE-2008-0422 (score 53/100).
- CVE-2008-0422 HIGH 7.5 UPGRADE SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers
- CVE-2007-5417 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in index.php in boastMachine (aka bMachine) 2.8 allows remote attackers to r
- CVE-2007-2932 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitr
- CVE-2007-2860 MEDIUM 6.5 DOWNGRADE user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id p
- CVE-2006-3831 MEDIUM 5.0 UPGRADE The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filename
- CVE-2006-3830 MEDIUM 4.0 DOWNGRADE The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlie
- CVE-2006-3829 MEDIUM 5.0 DOWNGRADE Cross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine (formerly bMachi
- CVE-2006-3828 MEDIUM 6.5 DOWNGRADE Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows rem
- CVE-2006-3827 MEDIUM 6.5 DOWNGRADE SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachi
- CVE-2006-3826 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and e
- CVE-2006-2491 MEDIUM 6.8 UPGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1
- CVE-2006-1841 LOW 2.6 DOWNGRADE Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other vers
- CVE-2006-0131 MEDIUM 5.0 DOWNGRADE boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.ph
- CVE-2005-1580 HIGH 7.5 DOWNGRADE users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which al
FAQ
How do I fix boastmachine vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is boastmachine being exploited right now?
None of the tracked boastmachine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which boastmachine CVE should I patch first?
CVE-2008-0422 currently ranks highest (53/100): SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers.