CVE-2025-15153

LOW

pbootcms < 3.2.12 - Direct Request Access to SQLite Database File

Title source: llm
STIX 2.1

Description

A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing a manipulation can lead to files or directories accessible. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. Modifying the configuration settings is advised.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.338531
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.338531
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.719814

Scores

CVSS v3 3.7
EPSS 0.0043
EPSS Percentile 34.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-425 CWE-552
Status published
Products (1)
pbootcms/pbootcms < 3.2.12
Published Dec 28, 2025
Tracked Since Feb 18, 2026