BoyunCMS up to 1.21 on PHP7 Installation install/install2.php db_host deserialization

Summaryinfo

A vulnerability classified as critical has been found in BoyunCMS up to 1.21 on PHP7. The affected element is an unknown function of the file install/install2.php of the component Installation Handler. This manipulation of the argument db_host causes deserialization. This vulnerability appears as CVE-2025-7099. The attack may be initiated remotely. In addition, an exploit is available.

Detailsinfo

A vulnerability has been found in BoyunCMS up to 1.21 on PHP7 and classified as critical. Affected by this vulnerability is some unknown processing of the file install/install2.php of the component Installation Handler. The manipulation of the argument db_host with an unknown input leads to a deserialization vulnerability. The CWE definition for the vulnerability is CWE-502. The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid. As an impact it is known to affect confidentiality, integrity, and availability.

The advisory is shared at note-hxlab.wetolink.com. This vulnerability is known as CVE-2025-7099. The exploitation appears to be difficult. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details and also a public exploit are known.

It is possible to download the exploit at note-hxlab.wetolink.com. It is declared as proof-of-concept. By approaching the search of inurl:install/install2.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-20158). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• BoyunCMS

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #604310: Boyun Boyun PHPCMS <=1.21 Pre-Auth Arbitrary File Download vuln (by YELEIPENG)

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion