CVE-2025-15153: pbootcms — Exploit

Description

A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing a manipulation can lead to files or directories accessible. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. Modifying the configuration settings is advised.

Is your site exposed to CVE-2025-15153?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

3.7

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness Type (CWE)

CWE-425 CWE-425

CWE-552 CWE-552

Affected Products

Vendor	Product	Versions
pbootcms	pbootcms	< 3.2.12

References

Exploits

https://note-hxlab.wetolink.com/share/ALC1iSa8J56A

Other References

https://vuldb.com/?ctiid.338531 https://vuldb.com/?id.338531 https://vuldb.com/?submit.719814

Frequently Asked Questions

What is CVE-2025-15153? +

A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing a manipulation can lead to files or directories accessible. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. Modifying the configuration settings is advised. It has a CVSS v3.1 base score of 3.7 (LOW).

How severe is CVE-2025-15153? +

CVE-2025-15153 has a CVSS v3.1 score of 3.7 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

What products are affected by CVE-2025-15153? +

CVE-2025-15153 affects products from pbootcms, specifically: pbootcms. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-15153? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-34028

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated …

CVE-2025-1542

Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged …

CVE-2025-65011

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) an unauthorised user can view configuration files by directly …

CVE-2025-26381

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.

CVE-2025-26689 9.8

Direct request ('Forced Browsing') issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If a remote attacker sends a …

CVE-2022-43110 9.8

Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an …

CVE-2025-15153