Unrated severityNVD Advisory· Published May 24, 2007· Updated Jun 16, 2026

CVE-2007-2860

Description

user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by an edit_post action.

Affected products

Kailash Nadh/Boastmachine2 versions
cpe:2.3:a:boastmachine:boastmachine:3.0:*:platinum:*:*:*:*:*+ 1 more
- cpe:2.3:a:boastmachine:boastmachine:3.0:*:platinum:*:*:*:*:*
- (no CPE)range: = 3.0 platinum

Patches

Vulnerability mechanics

References

osvdb.org/41027nvd
securityreason.com/securityalert/2736nvd
www.securityfocus.com/archive/1/469226/100/0/threadednvd
www.securityfocus.com/bid/24096nvd
exchange.xforce.ibmcloud.com/vulnerabilities/34462nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000