{"id":"CVE-2025-4006","state":"PUBLISHED","title":"youyiio BeyongCms Document Management Page Upload.html unrestricted upload","description":"A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0. Affected is an unknown function of the file /admin/theme/Upload.html of the component Document Management Page. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.","publishedAt":"2025-04-28T07:00:08.315Z","updatedAt":"2025-04-28T14:09:50.785Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["youyiio BeyongCms"],"affected":[{"vendor":"youyiio","product":"BeyongCms","versions":[{"version":"1.6.0","status":"affected"}],"modules":["Document Management Page"]}],"references":["https://vuldb.com/?id.306342","https://vuldb.com/?ctiid.306342","https://vuldb.com/?submit.558152","https://wiki.shikangsi.com/post/share/7e2d3cf9-6463-4331-a1f5-c270d5695266"],"weaknesses":["CWE-434","CWE-284"],"ingestedAt":"2026-10-29T20:09:23.771Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/4xxx/CVE-2025-4006.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-4006","state":"PUBLISHED","datePublished":"2025-04-28T07:00:08.315Z","dateUpdated":"2025-04-28T14:09:50.785Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-04-26T09:16:12.146Z"},"containers":{"cna":{"title":"youyiio BeyongCms Document Management Page Upload.html unrestricted upload","descriptions":[{"lang":"en","value":"A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0. Affected is an unknown function of the file /admin/theme/Upload.html of the component Document Management Page. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."},{"lang":"de","value":"Es wurde eine kritische Schwachstelle in youyiio BeyongCms 1.6.0 entdeckt. Es geht dabei um eine nicht klar definierte Funktion der Datei /admin/theme/Upload.html der Komponente Document Management Page. Durch die Manipulation des Arguments File mit unbekannten Daten kann eine unrestricted upload-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"youyiio","product":"BeyongCms","versions":[{"version":"1.6.0","status":"affected"}],"modules":["Document Management Page"]}],"references":[{"url":"https://vuldb.com/?id.306342","name":"VDB-306342 | youyiio BeyongCms Document Management Page Upload.html unrestricted upload","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.306342","name":"VDB-306342 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.558152","name":"Submit #558152 | BeyongCms 1.6.0 Unrestricted Upload","tags":["third-party-advisory"]},{"url":"https://wiki.shikangsi.com/post/share/7e2d3cf9-6463-4331-a1f5-c270d5695266","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.7,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.7,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5.8,"vectorString":"AV:N/AC:L/Au:M/C:P/I:P/A:P"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-434","type":"CWE","lang":"en","description":"Unrestricted Upload"}]},{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"Improper Access Controls"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-04-28T07:00:08.315Z"},"timeline":[{"time":"2025-04-26T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-04-26T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-04-26T11:21:25.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"wiki (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-28T14:09:30.293307Z","id":"CVE-2025-4006","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-28T14:09:50.785Z"}}]}}}