CVE-2025-15153CWE-425CWE-552

CVE-2025-15153

Low · published December 29, 2025

CVSS v3.1
3.7
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing a manipulation can lead to files or directories accessible. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. Modifying the configuration settings is advised.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00509 · 42.6th percentile
Weaknesses
CWE-425 · Direct Request ('Forced Browsing'); CWE-552 · Files or Directories Accessible to External Parties
Published
2025-12-29T02:15Z
Affected products (1)
ProductVersionsFixed in
pbootcms/pbootcms≤ 3.2.12—
References (4)
https://note-hxlab.wetolink.com/share/ALC1iSa8J56A · [email protected]https://vuldb.com/?ctiid.338531 · [email protected]https://vuldb.com/?id.338531 · [email protected]https://vuldb.com/?submit.719814 · [email protected]
EPSS history
Timeline
  • 28 DEC 20:32Z
    PbootCMS SQLite Database pbootcms.db file access
    cvelistv5