296,746
Total vulnerabilities in the database
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.
| Software | From | Fixed in |
|---|---|---|
| cakefoundation / cakephp | 1.3.7 | 1.3.7.x |
cakephp / cakephp
|
1.3.7 | 1.3.7.x |
cakephp / cakephp
|
1.3.7 | 1.3.8 |