CVE-2026-77635

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-77635 CVE-2026-77635 CakePHP 5.2.13 - cakephp I am @abraxasnull. Loopback lab. The client is CVE-2026-77635-Abraxas-Labs.py. JSONVALUE is not bound. FunctionsBuilder::jsonValue with PostgresDriver rewrites to...

CVE-2026-79752

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-79752 CVE-2026-79752 CakePHP 5.2.13 - cakephp I am @abraxasnull. Loopback lab. The client is CVE-2026-79752-Abraxas-Labs.py. CAST AS literal. FunctionsBuilder::cast and extract / datePart / dateAdd splices...

Linux Distros Unpatched Vulnerability : CVE-2026-79752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract,...

Exploit for CVE-2026-79752

abraxaslabs.tech · github.com/abraxas ·&...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the FunctionsBuilder::cast, extract, datePart, or dateAdd methods when user-controlled input is passed to the dataType, part, or unit parameters. An attacker can execute arbitrary SQL commands by supplying crafted inpu...

SQL Injection

Overview cakephp/cakephp is a rapid development framework for PHP which uses commonly known design patterns like Associative Data Mapping, Front Controller, and MVC. Affected versions of this package are vulnerable to SQL Injection via the FunctionsBuilder::cast, extract, datePart, or dateAdd...

GHSA-VJQC-Q4MP-2RVF CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

Impact The FunctionsBuilder::cast$field, $dataType, extract$part, $expr, datePart$part, $expr, dateAdd$expr, $value, $unit methods are vulnerable to SQL injection if user controlled data is supplied to the $dataType / $part / $unit parameters. Patches 5.3.7, 5.2.14, 5.1.9, 4.6.5, 4.5.12 contain...

CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

Impact The FunctionsBuilder::cast$field, $dataType, extract$part, $expr, datePart$part, $expr, dateAdd$expr, $value, $unit methods are vulnerable to SQL injection if user controlled data is supplied to the $dataType / $part / $unit parameters. Patches 5.3.7, 5.2.14, 5.1.9, 4.6.5, 4.5.12 contain...

CVE-2026-79752

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CVE-2026-79752 CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CVE-2026-79752

CakePHP , a rapid development framework for PHP, is affected by an SQL injection vulnerability in src/Database/FunctionsBuilder.php. The methods FunctionsBuilder::cast , ::extract , ::datePart , and ::dateAdd accept user-controlled dataType, part, or unit values and incorporate them into generate...

CVE-2026-79752 CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CVE-2026-79752 CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CVE-2026-79752

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

EUVD-2026-81673

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CVE-2026-79752: Improper Neutralization of Special Elements used in an SQL Command

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver

Impact The FunctionsBuilder::jsonValue$field, $jsonPath methods with the Postgres driver is vulnerable to SQL injection if user controlled data is supplied to the $jsonPath parameter. Patches 5.1.10, 5.2.15, 5.3.7 Workarounds Don't provide user controlled data to these functions/parameters...

GHSA-FXF7-VHH8-7VPQ CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver

Impact The FunctionsBuilder::jsonValue$field, $jsonPath methods with the Postgres driver is vulnerable to SQL injection if user controlled data is supplied to the $jsonPath parameter. Patches 5.1.10, 5.2.15, 5.3.7 Workarounds Don't provide user controlled data to these functions/parameters...

EUVD-2026-65121

CakePHP: FunctionsBuilder::jsonValue vulerable to SQL injection with PostgresDriver...

Linux Distros Unpatched Vulnerability : CVE-2026-77635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue wit...