Low severity3.8NVD Advisory· Published Dec 29, 2025· Updated Apr 29, 2026

CVE-2025-15187

Description

A vulnerability was found in GreenCMS up to 2.3. This affects an unknown part of the file /DataController.class.php of the component File Handler. Performing a manipulation of the argument sqlFiles/zipFiles results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Greencms/Greencms2 versions
cpe:2.3:a:njtech:greencms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:njtech:greencms:*:*:*:*:*:*:*:*range: <=2.3
- (no CPE)range: <=2.3

Patches

Vulnerability mechanics

References

github.com/ueh1013/VULN/issues/4nvdExploitIssue TrackingThird Party Advisory
github.com/ueh1013/VULN/issues/5nvdExploitIssue TrackingThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.247
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000