CPE Details
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:cakephp:cakephp:1.3.4:*:*:*:*:*:*:*
Informations
Vendor
cakephpProduct
cakephpVersion
1.3.4Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header. | 7.5 |
Haute |
||
| The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files. | 7.5 |
