6.9
Moyenne
CVE-2025-15154 A security vulnerability has been detected in PbootCMS up to 3.2.12
Description
A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PbootCMS 3.2 | 3.2.0 → 3.2.12 | Pas de correctif indiqué |
Autres CVE de PbootCMS
Les 13 CVE de PbootCMS →
CVE-2026-92383
A security vulnerability has been detected in PbootCMS up to 3.2.24
5.3
Moyenne
CVE-2026-92381
A weakness has been identified in PbootCMS up to 3.2.22
5.1
Moyenne
CVE-2026-12066
A security flaw has been discovered in PbootCMS up to 3.2.12
6.9
Moyenne
CVE-2026-4514
A flaw has been found in PbootCMS up to 3.2.12
5.3
Moyenne