Input Validation and Logic

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execut…CVE-2010-4335Cakephp · 55% likely

   CWE-20

2. The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.CVE-2016-4793Cakephp · 5.1% likely

   CWE-20

3. CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisionsCVE-2026-54713cakephp · CVSS 3.7 · 0.5% likely

   CWE-1023

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.