Vulnerability Database

296,147

Total vulnerabilities in the database

CakePHP vulnerable to Remote File Inclusion through View template name manipulation

CakePHP 2.x prior to 2.0.99, 2.1.99, 2.2.99, 2.3.99, 2.4.99, 2.5.99, 2.6.12, and 2.7.6 and 3.x prior to 3.0.15 and 3.1.4 is vulnerable to Remote File Inclusion through View template name manipulation.

No technical information available.

No CWE or OWASP classifications available.

Software From Fixed in
Composer icon cakephp / cakephp 2.0.0 2.0.99
Composer icon cakephp / cakephp 2.1.0 2.1.99
Composer icon cakephp / cakephp 2.2.0 2.2.99
Composer icon cakephp / cakephp 2.3.0 2.3.99
Composer icon cakephp / cakephp 2.4.0 2.4.99
Composer icon cakephp / cakephp 2.5.0 2.5.99
Composer icon cakephp / cakephp 2.6.0 2.6.12
Composer icon cakephp / cakephp 2.7.0 2.7.6
Composer icon cakephp / cakephp 3.0.0 3.0.15
Composer icon cakephp / cakephp 3.1.0 3.1.4