Unrestricted File Upload in BoyunCMS by Boyun
CVE-2025-7100
5.3MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-7100?
A vulnerability exists in BoyunCMS up to version 1.4.20 due to improper handling of the image argument in the /application/user/controller/Index.php file. This flaw leads to unrestricted file uploads, allowing remote attackers to upload malicious files to the server. The publicly disclosed exploit significantly increases the risk for systems running vulnerable versions, as it provides attackers with the ability to execute arbitrary code or compromise the integrity of the system.
Affected Version(s)
BoyunCMS 1.4.0
BoyunCMS 1.4.1
BoyunCMS 1.4.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.