Debian/cakephp: unknown

Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 40

Action: Upgrade cakephp to 1.1.13.4450-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-4067
• https://security-tracker.debian.org/tracker/CVE-2006-4067

published 2006-08-10T00:04:00Z · modified 2026-08-27T12:47:35.243545499Z · JSON