CVE-2009-3654: 316solutions Boost

Medium severity, CVSS 6.4. EPSS: 1.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors.

Affected products

• 316solutions Boost: up to and including 6.x-1.01; version 6.x-1.0 only; version 6.x-1.0-alpha1 only; version 6.x-1.0-alpha2 only; version 6.x-1.0-alpha3 only; version 6.x-1.0-alpha4 only; …

Published 2009-10-09. Last modified 2026-06-16.