Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/53553
http://www.securityfocus.com/bid/36561