CVE-2025-15154

5.3MEDIUM

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipula

公開日: 12/28/2025更新日: 12/30/2025
NVDで表示MITREで表示

説明

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

AI分析AIによる分析

影響を受ける製品

pbootcmspbootcms

参照