6.3
Medium
CVE-2025-7099 A vulnerability has been found in BoyunCMS up to 1.21 on PHP7 and classified as critical
Description
A vulnerability has been found in BoyunCMS up to 1.21 on PHP7 and classified as critical. Affected by this vulnerability is an unknown functionality of the file install/install2.php of the component Installation Handler. The manipulation of the argument db_host leads to deserialization. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BoyunCMS | 1.21 | No fix stated |
| BoyunCMS | 1.20 | No fix stated |
| BoyunCMS | 1.19 | No fix stated |
| BoyunCMS | 1.18 | No fix stated |
| BoyunCMS | 1.17 | No fix stated |
| BoyunCMS | 1.16 | No fix stated |
| BoyunCMS | 1.15 | No fix stated |
| BoyunCMS | 1.14 | No fix stated |
| BoyunCMS | 1.13 | No fix stated |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| BoyunCMS | 1.12 | No fix stated |
| BoyunCMS | 1.11 | No fix stated |
| BoyunCMS | 1.10 | No fix stated |
| BoyunCMS | 1.9 | No fix stated |
| BoyunCMS | 1.8 | No fix stated |
| BoyunCMS | 1.7 | No fix stated |
| BoyunCMS | 1.6 | No fix stated |
| BoyunCMS | 1.5 | No fix stated |
| BoyunCMS | 1.4 | No fix stated |
| BoyunCMS | 1.3 | No fix stated |
| BoyunCMS | 1.2 | No fix stated |
| BoyunCMS | 1.1 | No fix stated |
| BoyunCMS | 1.0 | No fix stated |
Other CVEs of BoyunCMS
The 5 CVEs of BoyunCMS →
CVE-2025-7103
A vulnerability was found in BoyunCMS up to 1.4.20
5.3
Medium
CVE-2025-7102
A vulnerability was found in BoyunCMS up to 1.4.20
5.3
Medium
CVE-2025-7101
A vulnerability was found in BoyunCMS up to 1.4.20
5.3
Medium
CVE-2025-7100
A vulnerability was found in BoyunCMS up to 1.4.20 and classified as critical
5.3
Medium