Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cakefoundation CakePHP libs/controller/components/security.php文件任意代码执行漏洞
Vulnerability Description
CakePHP是美国Cake软件基金会的一个基于MVC架构的、开源的Web开发框架。该框架具有灵活的视图缓存、自动生成CRUD代码等功能。 CakePHP 1.3.x至1.3.5版本以及1.2.8版本中的libs/controller/components/security.php文件中的_validatePost函数中存在输入验证漏洞。远程攻击者可以借助由未序列化函数处理的特制数据[_Token][fields]值，修改内部Cake缓冲，并执行任意代码。该漏洞可以通过修改file_map缓冲去执行任意本
CVSS Information
N/A
Vulnerability Type
N/A