Lucene search
+L

3 matches found

OSV
OSV
•added 2023/01/20 5:30 p.m.•220 views

GHSA-6G8Q-QFPV-57WP CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection

Impact The Cake\Database\Query::limit and Cake\Database\Query::offset methods are vulnerable to SQL injection if passed un-sanitized user request data. Patches This issue has been fixed in 4.2.12, 4.3.11, 4.4.10 Workarounds Using CakePHP's Pagination library will mitigate this issue, as will...

9.8CVSS9.8AI score0.00858EPSS
SaveExploits0References5
Rows per page
Query Builder