cve/cves/2025/CVE-2025-7101.md at main - cve - 临风笛

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00

Files

T

CVE-BOT 2773808b25 Drop PoC links to deleted repositories 2026-09-11

2026-09-11 08:27:26 +00:00

2.6 KiB

Raw Permalink Blame History

CVE-2025-7101

BoyunCMS Configuration File install_ok.php code injection

Description

A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/install_ok.php of the component Configuration File Handler. The manipulation of the argument db_pass leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.