Skip to content
OpenAdvisories

Package · Debian

cakephp

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2016-4793 Public exploit

    CakePHP allows remote attackers to spoof their IP

    The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.

    cakephp/cakephp cakephp cakephp Debian Ubuntu Packagist
  • High —
    CVE-2010-4335 Public exploit EPSS 55%

    CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code

    The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by t…

    cakephp/cakephp cakephp Debian Packagist