6.9
Medium
CVE-2025-15154 A security vulnerability has been detected in PbootCMS up to 3.2.12
Description
A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PbootCMS 3.2 | 3.2.0 → 3.2.12 | No fix stated |
References
- VDB-338532 | PbootCMS Header handle.php get_user_ip less trusted source vuldb.com
- VDB-338532 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #719818 | PbootCMS 3.2.12 get_user_ip IP Address Spoofing vuldb.com
- note-hxlab.wetolink.com note-hxlab.wetolink.com
Timeline
- Published
- Last modified
Other CVEs of PbootCMS
The 13 CVEs of PbootCMS →
CVE-2026-92383
A security vulnerability has been detected in PbootCMS up to 3.2.24
5.3
Medium
CVE-2026-92381
A weakness has been identified in PbootCMS up to 3.2.22
5.1
Medium
CVE-2026-12066
A security flaw has been discovered in PbootCMS up to 3.2.12
6.9
Medium
CVE-2026-4514
A flaw has been found in PbootCMS up to 3.2.12
5.3
Medium