mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-07 11:06:19 +00:00
661 B
661 B
CVE-2016-4793
Description
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.
POC
Reference
- http://legalhackers.com/advisories/CakePHP-IP-Spoofing-Vulnerability.txt
- https://www.exploit-db.com/exploits/39813/
Github
No PoCs found on GitHub currently.