SQL Injection

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Database Query::offset() and limit() vulnerable to SQL injection in cakephpCVE-2023-22727cakephp · CVSS 9.8 · 0.9% likely

   CWE-89

2. CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injectionCVE-2026-79752cakephp · CVSS 9.2 · 0.6% likely

   CWE-89

3. CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriverCVE-2026-77635cakephp · CVSS 9.2 · 0.5% likely

   CWE-89

4. CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()CVE-2026-119418cakephp · CVSS 8.1 · 0.5% likely

   CWE-89

5. CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression CollationCVE-2026-119419cakephp · CVSS 8.1 · 0.4% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.