cakephp vulnerabilities (Ubuntu)
10 vulnerabilities.
-
cakephpUbuntu CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection 9.2 Critical -
cakephpUbuntu CakePHP: Potential Authentication bypass with CookieAuthenticator 9.1 Critical -
cakephpUbuntu CakePHP: SmtpTransport vulnerable to CRLF header injection 8.2 High -
cakephpUbuntu CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver 9.2 Critical -
cakephpUbuntu CakePHP: View::element() is missing a path containment check 6.3 Medium -
cakephpUbuntu CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting 5.4 Medium -
cakephpUbuntu Database Query::offset() and limit() vulnerable to SQL injection in cakephp 9.8 Critical -
cakephpUbuntu CakePHP allows method override parameters to bypass CSRF checks 8.8 High -
cakephpUbuntu Cross-Site Request Forgery in CakePHP 4.3 Medium -
cakephpUbuntu CakePHP allows remote attackers to spoof their IP 7.5 High