Description

Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 ("Not Found") error page. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2006-4067

Related Vulnerabilities

WebLogic CVE-2019-2645 Vulnerability (CVE-2019-2645)

PHP Other Vulnerability (CVE-2014-4670)

MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-9240)

Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-20920)

Oracle JRE CVE-2018-2678 Vulnerability (CVE-2018-2678)

Severity

Medium

Classification

CVE-2006-4067 CWE-707

Tags

Missing Update Known Vulnerabilities