Medium severity6.3NVD Advisory· Published Jul 7, 2025· Updated Apr 29, 2026
CVE-2025-7103
CVE-2025-7103
Description
A vulnerability was found in BoyunCMS up to 1.4.20. It has been rated as critical. This issue affects some unknown processing of the file /application/pay/controller/Index.php of the component curl. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
2cpe:2.3:a:boyuncms_project:boyuncms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:boyuncms_project:boyuncms:*:*:*:*:*:*:*:*range: >=1.4,<=1.4.20
- (no CPE)range: <=1.4.20
Patches
Vulnerability mechanics
References
4- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- note-hxlab.wetolink.com/share/gRI0WyQLQsmdnvdBroken Link
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.