Lucene search
HistoryMay 24, 2007 - 7:30 p.m.
CVE-2007-2860
cve-2007-2860
boastmachine 3.0 platinum
remote authentication
privilege escalation
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.3%
user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by an edit_post action.
Affected configurations
Node
boastmachineboastmachineMatch3.0platinum
| CPE | Name | Operator | Version |
|---|---|---|---|
| boastmachine:boastmachine | boastmachine | eq | 3.0 |
Related
prion
prion
Deserialization of untrusted data
2007-05-24 19:30:00
cvelist
cvelist
CVE-2007-2860
2007-05-24 19:00:00
nvd
nvd
CVE-2007-2860
2007-05-24 19:30:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.3%
Related for CVE-2007-2860