Threats tagged 'ghsa-h3r5-88vp-3qm7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.2	CVE-2026-119418CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying Critical9.22026-10-30GCVE DatabaseCVE-2026-119418 CakePHP versions through 5.4.3 have an SQL injection vulnerability in the WindowExpression::range() and frame() methods. This flaw allows attackers to inject SQL by supplying unvalidated frame offsets and directions, which are used in the OVER clause of SQL queries. Exploitation could lead to execution of arbitrary SQL commands with the database connection's privileges. Report on CVE-2026-119418 Vulnerability CWE-89 #ghsa-h3r5-88vp-3qm7	GCVE Database	2026-10-30

Page 1 of 1