Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#CakePHP

1 articles

Deep Dive

CakePHP SQL Injection, Fixed in 5.4.4 (CVE-2026-119418)

CakePHP window offsets and collation names allow SQL injection when fed untrusted input. Check exposure and upgrade to 5.4.4, 5.3.8 or 5.2.16.

Ostorlab Team
Nov 01, 2026