| 标题 | Boyun Boyun PHPCMS <=1.4.20 arbitrary file upload |
|---|
| 描述 | BoYunCMS (versions ≤1.4.20) suffers from an arbitrary file upload vulnerability in the /application/user/controller/Index.php file. Due to insufficient validation in the file upload functionality, authenticated users can upload malicious files, such as web shells, via the /user/Index/upload endpoint. This flaw allows attackers to achieve remote code execution on the server, posing a critical security risk. |
|---|
| 来源 | ⚠️ https://note-hxlab.wetolink.com/share/KLjaD7oBzCSp |
|---|
| 用户 | YELEIPENG (UID 73615) |
|---|
| 提交 | 2025-06-26 10時57分 (1 年前) |
|---|
| 管理 | 2025-07-05 19時33分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 315014 [BoyunCMS 直到 1.4.20 Index.php image 权限提升] |
|---|
| 积分 | 20 |
|---|