| Package | Affected versions | Patched versions |
|---|---|---|
| boastmachine | = 2.5= 2.7= 2.8= 2.9b= 3.1 |
Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, "UNION," and "SELECT," which are not filtered by the product, which only checks for "insert," "delete," "update," and "replace."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free