CVE-2025-15153

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-15153
A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing a manipulation can lead to files or directories accessible. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. Modifying the configuration settings is advised.

3.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.6 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability : 4.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://note-hxlab.wetolink.com/share/ALC1iSa8J56A Exploit
https://vuldb.com/?ctiid.338531 Permissions Required VDB Entry
https://vuldb.com/?id.338531 Third Party Advisory VDB Entry
https://vuldb.com/?submit.719814 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:pbootcms:pbootcms:*:*:*:*:*:*:*:*
History

24 Feb 2026, 07:16

Type Values Removed Values Added
Summary (en) A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing manipulation can lead to files or directories accessible. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be exploited. Modifying the configuration settings is advised. (en) A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing a manipulation can lead to files or directories accessible. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. Modifying the configuration settings is advised.

30 Dec 2025, 19:01

Type Values Removed Values Added
References () https://note-hxlab.wetolink.com/share/ALC1iSa8J56A - () https://note-hxlab.wetolink.com/share/ALC1iSa8J56A - Exploit
References () https://vuldb.com/?ctiid.338531 - () https://vuldb.com/?ctiid.338531 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.338531 - () https://vuldb.com/?id.338531 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.719814 - () https://vuldb.com/?submit.719814 - Third Party Advisory, VDB Entry
First Time Pbootcms
Pbootcms pbootcms
CPE cpe:2.3:a:pbootcms:pbootcms:*:*:*:*:*:*:*:*

28 Dec 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-12-28 21:15

Updated : 2026-02-24 07:16

NVD link : CVE-2025-15153

Mitre link : CVE-2025-15153

CVE.ORG link : CVE-2025-15153

JSON object : View

Products Affected

pbootcms

  • pbootcms
CWE
CWE-425

Direct Request ('Forced Browsing')

CWE-552

Files or Directories Accessible to External Parties