Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/53553
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3629
http://www.securityfocus.com/bid/36561