← All credits

Mark Story

5 vulnerability records and advisories credit this contributor.

CVE-2026-119419

CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collation

CVE-2026-119418

CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()

CVE-2026-119417

CakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransport

CVE-2026-119416

CakePHP through 5.4.3 Cookie Leakage via HTTP Client CookieCollection Domain Matching

CVE-2026-119415

CakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-Type