mirror of
https://github.com/0xMarcio/cve.git
synced 2026-02-13 03:02:49 +00:00
672 B
672 B
CVE-2016-4793
Description
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.
POC
Reference
- http://legalhackers.com/advisories/CakePHP-IP-Spoofing-Vulnerability.txt
- https://www.exploit-db.com/exploits/39813/
Github
No PoCs found on GitHub currently.