CVE:CVE-2007-2860
CNNVD:CNNVD-200705-465
BoastMachine platinum中的user.php允许远程认证用户借助一个修改过的id参数，比如edit_post操作，来获得特权。
solution:Upgrade boastmachine boastmachine to a higher version than 3.0,and avoid the version 3.0