Medium severity6.3NVD Advisory· Published Jul 7, 2025· Updated Apr 29, 2026
CVE-2025-7101
CVE-2025-7101
Description
A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/install_ok.php of the component Configuration File Handler. The manipulation of the argument db_pass leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
2cpe:2.3:a:boyuncms_project:boyuncms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:boyuncms_project:boyuncms:*:*:*:*:*:*:*:*range: >=1.4,<=1.4.20
- (no CPE)range: <=1.4.20
Patches
Vulnerability mechanics
References
4- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- note-hxlab.wetolink.com/share/6wemW8CnOMbunvdBroken Link
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.