CVE-2005-1580: Boastmachine

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code.

Affected products

• Boastmachine Boastmachine: version 3.0 only

Published 2005-05-11. Last modified 2026-06-16.