BoyunCMS vulnerabilities
We track 4 vulnerabilities in BoyunCMS products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 7, 2025.
Latest BoyunCMS vulnerabilities
- 7.5 High severity
BoyunCMS: Server-Side Request Forgery
A vulnerability was found in BoyunCMS up to 1.4.20. It has been rated as critical. This issue affects some unknown processing of the file /application/pay/controller/Index.php of the component curl. The manipulation leads to server-side request forgery. The at
- 9.8 Critical severity
BoyunCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/controller/Server.php. The manipulation of the argument phone leads to sql injection. The attack can be
- 9.8 Critical severity
BoyunCMS: Improper Control of Generation of Code
A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/install_ok.php of the component Configuration File Handler. The manipulation of the argument db_pass leads to code injecti
- 9.8 Critical severity
BoyunCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in BoyunCMS up to 1.4.20 and classified as critical. Affected by this issue is some unknown functionality of the file /application/user/controller/Index.php. The manipulation of the argument image leads to unrestricted upload. The att