https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:05:19.881597+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-178353 EUVD-2026-178353 2026-10-03T01:05:19.950924+00:00 EUVD-2026-178353 https://cve.radiocsirt.org/vuln/fkie_cve-2011-3712 fkie_cve-2011-3712 2026-10-03T01:05:19.950963+00:00

CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.

 https://cve.radiocsirt.org/vuln/ghsa-r7p6-fr3x-r877 GHSA-r7p6-fr3x-r877 — CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file 2026-10-03T01:05:19.950998+00:00

Affected: Packagist: cakephp/cakephp

CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a `.php` file, which reveals the installation path in an error message, as demonstrated by `dispatcher.php` and certain other files.

 https://cve.radiocsirt.org/vuln/gsd-2011-3712 gsd-2011-3712 2026-10-03T01:05:19.951023+00:00 gsd-2011-3712 https://cve.radiocsirt.org/vuln/ubuntu-cve-2011-3712 Withdrawn: UBUNTU-CVE-2011-3712 2026-10-03T01:05:19.951036+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: cakephp, Ubuntu:16.04:LTS: cakephp

CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.