Unrestricted File Upload in BoyunCMS by Boyun
CVE-2025-7100
6.3MEDIUM
What is CVE-2025-7100?
A vulnerability exists in BoyunCMS up to version 1.4.20 due to improper handling of the image argument in the /application/user/controller/Index.php file. This flaw leads to unrestricted file uploads, allowing remote attackers to upload malicious files to the server. The publicly disclosed exploit significantly increases the risk for systems running vulnerable versions, as it provides attackers with the ability to execute arbitrary code or compromise the integrity of the system.