| 标题 | Boyun Boyun PHPCMS <=1.4.20 SSRF |
|---|
| 描述 | A Server-Side Request Forgery (SSRF) vulnerability exists in BoYun PHPCMS (≤1.4.20) in /application/pay/controller/Index.php, where user-supplied URLs are passed directly to curl without validation, allowing attackers to make requests to internal or arbitrary network resources and potentially access sensitive internal services. |
|---|
| 来源 | ⚠️ https://note-hxlab.wetolink.com/share/gRI0WyQLQsmd |
|---|
| 用户 | YELEIPENG (UID 73615) |
|---|
| 提交 | 2025-06-26 08時14分 (1 年前) |
|---|
| 管理 | 2025-07-05 19時39分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 315017 [BoyunCMS 直到 1.4.20 curl Index.php 权限提升] |
|---|
| 积分 | 19 |
|---|