CVEs-PoC/2016/CVE-2016-4793.md

CVE-2016-4793

Description

The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.

POC

Reference

• http://legalhackers.com/advisories/CakePHP-IP-Spoofing-Vulnerability.txt
• https://www.exploit-db.com/exploits/39813/

Github

No PoCs found on GitHub currently.