CVE-2025-15154: PbootCMS Header handle.php get_user_ip less trusted source
A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15154?
The severity of CVE-2025-15154 is classified as high due to the potential for IP manipulation leading to security risks.
How do I fix CVE-2025-15154?
To fix CVE-2025-15154, upgrade PbootCMS to versions later than 3.2.12 where the vulnerability has been addressed.
What component is affected by CVE-2025-15154?
CVE-2025-15154 affects the Header Handler component, specifically the get_user_ip function in core/function/handle.php.
What type of vulnerability is CVE-2025-15154?
CVE-2025-15154 is a security vulnerability related to improper input handling within the IP address retrieval process.
Who is impacted by CVE-2025-15154?
Users of PbootCMS versions up to and including 3.2.12 are impacted by CVE-2025-15154.