Vendor
critical
advisory
SQL Injection Vulnerability in CakePHP FunctionsBuilder
1 TTP 1 CVEMultiple methods in the CakePHP FunctionsBuilder component are vulnerable to SQL injection when user-supplied input is passed to specific functional parameters.
PoC
cakephp/database +1
sql-injection
vulnerability
web-application
1t
1c
updated
high
advisory
SQL Injection in CakePHP FunctionsBuilder
1 TTP 2 CVEsThe CakePHP framework contains an SQL injection vulnerability in the FunctionsBuilder::jsonValue() method when using the Postgres driver, allowing unauthorized database command execution via user-controlled jsonPath input.
PoC
cakephp +2
sql-injection
vulnerability
web-application
1t
2c
updated