cakephp-smtp-crlf

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cakephp-smtp-crlf cakephp-smtp-crlf Class: Mail header injection Reach: Remote CakePHP 5.4.2 887b641 - Cake Software Foundation GHSA-2qh5 / CVE-2026-77634 added strreplace"\r\n", '', $val on SmtpTransport and...

cakephp-collate-sqli

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cakephp-collate-sqli cakephp-collate-sqli Class: SQLi Reach: Remote CakePHP 5.4.2 887b641 - Cake Software Foundation StringExpression::sql binds the string value and concatenates collation. IdentifierExpression does t...

cakephp-trusted-proxies

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cakephp-trusted-proxies cakephp-trusted-proxies Class: HTTPS redirect bypass / IP-host spoof Reach: Remote CakePHP 5.4.2 887b641 - Cake Software Foundation HttpsEnforcerMiddleware with trustedProxies = '10.0.0.1' call...

cakephp-cookie-suffix

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cakephp-cookie-suffix cakephp-cookie-suffix Class: Cookie leak / plant Reach: Remote CakePHP 5.4.2 887b641 - Cake Software Foundation CookieCollection::findMatchingCookies uses pregmatch'/' . pregquote$domain . '$/',...

CakeFuzzer

CakeFuzzer Latest release : 1.0 License : GNU GPL v3.0 Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives. Currently it is implemented to support the Cake...

CVE-2026-77635

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-77635 CVE-2026-77635 CakePHP 5.2.13 - cakephp I am @abraxasnull. Loopback lab. The client is CVE-2026-77635-Abraxas-Labs.py. JSONVALUE is not bound. FunctionsBuilder::jsonValue with PostgresDriver rewrites to...

CVE-2026-79752

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-79752 CVE-2026-79752 CakePHP 5.2.13 - cakephp I am @abraxasnull. Loopback lab. The client is CVE-2026-79752-Abraxas-Labs.py. CAST AS literal. FunctionsBuilder::cast and extract / datePart / dateAdd splices...

CVE-2026-79752

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6...

CLSA-2026-1791988278 TuxCare security update for cakephp/cakephp (3 CVEs)

TuxCare rebuilt cakephp/cakephp to address 3 CVEs. Fixed in 4.4.18-p1+tuxcare...

CLSA-2026-1791987574 TuxCare security update for cakephp/cakephp (3 CVEs)

TuxCare rebuilt cakephp/cakephp to address 3 CVEs. Fixed in 5.0.11-p1+tuxcare...

EUVD-2026-93657

The CakeResponse::download method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted-string value without sanitization. Two distinct injection vectors exist in the unpatched code. First, if the filename...

CVE-2026-106512: Improper Neutralization of CRLF Sequences in HTTP Headers

The CakeResponse::download method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted-string value without sanitization. Two distinct injection vectors exist in the unpatched code. First, if the filename...

PT-2026-107102

The CakeResponse::download method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted-string value without sanitization. Two distinct injection vectors exist in the unpatched code. First, if the filename...

CVE-2026-95658

MISP's WorkflowsController exposed the moduleStatelessExecution action in the Security component's unlockedActions list. In CakePHP, listing an action in unlockedActions disables both the CSRF token check and the field hash validation for that action. Because moduleStatelessExecution executes a...

CVE-2026-95658 MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules

MISP's WorkflowsController exposed the moduleStatelessExecution action in the Security component's unlockedActions list. In CakePHP, listing an action in unlockedActions disables both the CSRF token check and the field hash validation for that action. Because moduleStatelessExecution executes a...

CVE-2026-95658

CVE-2026-95658 affects MISP , where the moduleStatelessExecution action in the WorkflowsController was listed in the CakePHP Security component's unlockedActions list, disabling both the CSRF token check and field hash validation . An attacker could craft a cross-site form post that, when submitt...

Exploit for CVE-2026-77635

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-79752

abraxaslabs.tech · github.com/abraxas ·&...

SQL Injection

CakePHP is vulnerable to SQL Injection. The vulnerability is due to insufficient validation and escaping of user-controlled dataType, part, and unit values used in generated SQL statements, which allows an attacker to inject malicious SQL queries and potentially access, modify, or delete database...

CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

Impact The FunctionsBuilder::cast$field, $dataType, extract$part, $expr, datePart$part, $expr, dateAdd$expr, $value, $unit methods are vulnerable to SQL injection if user controlled data is supplied to the $dataType / $part / $unit parameters. Patches 5.3.7, 5.2.14, 5.1.9, 4.6.5, 4.5.12 contain...