CVE-2010-4335
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
CVE-2010-4335 is a high vulnerability (CVSS 7.5) in Cakefoundation Cakephp, published January 14, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 55.2%, the 99th percentile. Fixed in cakephp/cakephp 1.3.6.
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
Exploit likelihood
What each source reports
NVD Score used
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
- Record
CVE-2010-4335- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
- Record
CVE-2010-4335- Updated
- 2026-11-02
EUVDEUVD-2022-3864 No score
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
- Record
EUVD-2022-3864- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g2vx-8v47-4vhh No score
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
- Record
GHSA-g2vx-8v47-4vhh- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
- Record
CVE-2010-4335- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-4335 No score
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
- Record
DEBIAN-CVE-2010-4335- Updated
- 2026-11-02
OSVGHSA-g2vx-8v47-4vhh No score
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
- Record
GHSA-g2vx-8v47-4vhh- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cakephp/cakephpPackagist |
1.2.8 up to 1.3.6 | 1.3.6 |
cakephpDebian:11 |
before 1.3.2-1.1 | 1.3.2-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | CakePHP 1.3.5/1.2.8 - 'Unserialize()' File Inclusion | 2011-01-18 |
| Exploit-DB | CakePHP 1.3.5/1.2.8 - Cache Corruption (Metasploit) | 2011-01-14 |
| Metasploit | CakePHP Cache Corruption Code Execution | 2010-11-15 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |