Database Access Vulnerability in PbootCMS by PbootCMS
CVE-2025-15153

6.3MEDIUM

Key Information:

Vendor

PbootCMS

Status
Pbootcms
Vendor
CVE Published:
28 December 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-15153?

A vulnerability has been discovered in PbootCMS versions up to 3.2.12 that affects the SQLite Database component, specifically the file located at /data/pbootcms.db. This weakness allows for potential remote manipulation, leading to unauthorized access to files or directories. Although exploiting this vulnerability is deemed complex and requires specific conditions, the exploit has been publicly released, making it essential for users to modify their configuration settings to mitigate risk.

Affected Version(s)

PbootCMS 3.2.0

PbootCMS 3.2.1

PbootCMS 3.2.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-15153 - Proof of Concept

References

https://vuldb.com/?id.338531
vdb-entrytechnical-description
https://vuldb.com/?ctiid.338531
signaturepermissions-required
https://vuldb.com/?submit.719814
third-party-advisory

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

pemic (VulDB User)
.