CVE-2025-7100

A vulnerability was found in BoyunCMS up to 1.4.20 and classified as critical. Affected by this issue is some unknown functionality of the file /application/user/controller/Index.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Configurations

No configuration.

History

08 Jul 2025, 16:18

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en BoyunCMS hasta la versión 1.4.20, clasificada como crítica. Este problema afecta a una funcionalidad desconocida del archivo /application/user/controller/Index.php. La manipulación del argumento "image" permite la carga sin restricciones. El ataque puede ejecutarse en remoto. Se ha hecho público el exploit y puede que sea utilizado.

07 Jul 2025, 16:15

Type Values Removed Values Added
References () https://note-hxlab.wetolink.com/share/KLjaD7oBzCSp - () https://note-hxlab.wetolink.com/share/KLjaD7oBzCSp -

07 Jul 2025, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-07 01:15

Updated : 2025-07-08 16:18


NVD link : CVE-2025-7100

Mitre link : CVE-2025-7100

CVE.ORG link : CVE-2025-7100


JSON object : View

Products Affected

No product.

CWE
CWE-284

Improper Access Control

CWE-434

Unrestricted Upload of File with Dangerous Type