Crítica
CVE-2026-79752
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 22
Restablecer filtros
Crítica
CVE-2026-77635
CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver
Alta
CVE-2026-77634
CakePHP: SmtpTransport vulnerable to CRLF header injection
Media
CVE-2026-48820
CakePHP: View::element() is missing a path containment check
Media
CVE-2026-23643
CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting
Media
ghsa-xwhj-pqcg-8rcr
CakePHP vulnerable to Cross-site Scripting in some development error pages
Media
ghsa-p76f-wr22-4rv6
CakePHP vulnerable to Remote File Inclusion through View template name manipulation
Media
ghsa-6hg4-vp5q-47mw
CakePHP allows direct access of prefixed controller actions
Alta
ghsa-q79m-c546-2g63
CakePHP vulnerable to Denial of Service attack through XML payloads
Media
ghsa-j9q2-f9q7-jhgq
CakePHP SecurityComponent cross form submission issue
Media
ghsa-829q-v5g8-hhxc
CakePHP has incorrect Cross-Site Request Forgery validation
Crítica
CVE-2023-22727
CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection
Alta
CVE-2020-35239
CakePHP allows method override parameters to bypass CSRF checks
Alta
CVE-2010-4335
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
Media
CVE-2011-3712
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
Alta
CVE-2012-4399
CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references
Alta
CVE-2015-8379
CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter
Alta
CVE-2016-4793
CakePHP allows remote attackers to spoof their IP
Media
CVE-2006-5031
CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files
Media
CVE-2006-4067
Cross-site scripting (XSS) vulnerability in CakePHP
Media
CVE-2020-15400
Cross-Site Request Forgery in CakePHP
Alta
CVE-2019-11458
Unsafe deserialization in SmtpTransport in CakePHP
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.