PT-2025-38616 · Phpress · Ppress

Quarter77 · Published 2025-09-19 · Updated 2025-09-20 · CVE-2025-52159

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PPress version 0.0.9

Description The default configuration of PPress contains hardcoded credentials.

Recommendations Change the default credentials in PPress version 0.0.9.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-52159

Affected Products

Ppress

References · 8

• 🔥 https://github.com/quarter77/PPress-CMS_vulnerability_chain_details/blob/main/CVE-2025-52159%20Details.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-52159 · Security Note
• https://osv.dev/vulnerability/CVE-2025-52159 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1969191973350223887 · Twitter Post
• https://github.com/quarter77/PPress-CMS-session-forgery-SSTI-vulnerability-leads-to-remote-command-execution · Note
• https://t.me/CVEtracker/32976 · Telegram Post
• https://twitter.com/CVEnew/status/1969291950189580380 · Twitter Post
• https://t.me/cveNotify/136024 · Telegram Post