Executive brief
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
Affected products
- Packagist cakephp/cakephp
Junglewise Threat Intelligence
CVE-2011-3712: CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
CVE-2011-3712 · Severity: info · Published 2022-05-17
Technologies: cakephp/cakephp (Packagist). Vendors: Packagist.
Related threats
- CakePHP has incorrect Cross-Site Request Forgery validation
- CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
- CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter
- CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files
- Cross-site scripting (XSS) vulnerability in CakePHP