Threats tagged 'ghsa-6q38-2qcr-3x34'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.2	CVE-2026-119419CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying Critical9.22026-10-30GCVE DatabaseCVE-2026-119419 CakePHP versions through 5.4.3 contain an SQL injection vulnerability that allows attackers to inject arbitrary SQL by supplying unvalidated collation values to StringExpression and IdentifierExpression. This vulnerability affects all database drivers used by the connection and can lead to full compromise of confidentiality, integrity, and availability of the database. Report on CVE-2026-119419 Vulnerability CWE-89 #ghsa-6q38-2qcr-3x34	GCVE Database	2026-10-30

Page 1 of 1