pkg:Debian/cakephp

All known vulnerabilities

• CRITICAL9.8CVE-2023-22727CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection
  from 0
• HIGH8.8CVE-2015-8379CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter
  from 0, < 2.8.0-1
• HIGH7.5CVE-2016-4793CakePHP allows remote attackers to spoof their IP
  from 0, < 1.3.15-1+deb7u2
• HIGH7.5CakePHP allows remote attackers to spoof their IP
  from 0, < 2.8.3-1
• MEDIUM6.5Cross-site scripting (XSS) vulnerability in CakePHP
  from 0, < 1.1.13.4450-1
• MEDIUM5.4CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting
  from 0
• MEDIUM4.3Cross-Site Request Forgery in CakePHP
  from 0
• —CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
  from 0, < 1.3.2-1.1
• —CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files
  from 0, < 1.1.13.4450-1