PT-2025-53669 · Pbootcms · Pbootcms

Pemic · Published 2025-12-28 · Updated 2025-12-28 · CVE-2025-15153

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PbootCMS versions prior to 3.2.13

Description A weakness exists in PbootCMS up to version 3.2.12. The issue affects an unknown function within the SQLite Database component, specifically the file /data/pbootcms.db. Successful manipulation can lead to unauthorized access to files or directories. The attack can be launched remotely and is considered highly complex, but the exploit has been publicly released.

Recommendations Modify the configuration settings.

Exploit

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-425

CWE-552

Related Identifiers

CVE-2025-15153

Affected Products

Pbootcms

References · 9

• 🔥 https://note-hxlab.wetolink.com/share/ALC1iSa8J56A · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15153 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15153 · Vendor Advisory
• https://vuldb.com/?submit.719814 · Note
• https://twitter.com/CVEnew/status/2005379262556029202 · Twitter Post
• https://vuldb.com/?id.338531 · Note
• https://vuldb.com/?ctiid.338531 · Note
• https://t.me/CVEtracker/40789 · Telegram Post
• https://t.me/cveNotify/146992 · Telegram Post