| Package | Affected versions | Patched versions |
|---|---|---|
| cakephp/cakephp | ≥ 1.3.7, < 1.3.8 | 1.3.8 |
| cakephp | = 1.3.7 |
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free