Skip to main content

CakePHP security issue - even in thechaw.com (written by core dev)

CakePHP security issue



Recently I have stumbled upon thechaw.com--written by CakePHP core dev and developed in CakePHP. I just wanted to check if they have fixed the old security issue in CakePHP and found that the issue is still open.

Proof of concept


CakePHP Security Issue

CakePHP memory error



In another time, found a famous memory error even in bakery.cakephp.org

CakePHP memory error

Bottom line



CakePHP is open source and so you can fix these issues by yourself

Comments

Popular posts from this blog

Solved: "Ports" Tab Not Visible in VS Code (WSL2)

None of the solutions I found on Reddit or GitHub worked, and most of the related GitHub issues were locked. So I'm documenting this here for future reference. Problem When using WSL2 in Visual Studio Code, the Ports tab—needed to access your application in Windows browsers like Chrome or Edge—doesn't appear. Even the Ports-related options are missing from the Command Palette. Solution After a lot of trial and error, here's what worked: Run npx serve in the VS Code terminal. It will output a URL such as http://localhost:3000/ . Click the link (or use the Follow Link option). This will open the app in your default browser. You may notice that it opens on a different port (for example, http://localhost:64198 ). At this point, the Ports tab becomes available in VS Code. After this initial trigger, the Ports tab seems to remain available in future VS Code...

Afzal Guru might be innocent -- Savukku

I have stopped reading Savukku.net ( Once I called it as WikiLeaks of India ) for sometime-- when it started J.J. evangelism after the state elections. But, recently, when I checked, it seems to be back to its core journalism with good hidden truths on Pramakudi incident and articles on death penalty. Its article on Afzal Guru is first of its kind in media--especially when everyone is crying foul to hang him. In மரண தண்டனையை à®’à®´ிப்போà®®் 4 (Let's stop death penalty, Part 4) article, it highlights counter theory about police brutality. I have noted that majority of the information are already available on the book written by Afzal Guru available online from JusticeForAfzalGuru.org website--but not prominent in mainstream media.

Kids, cartoon, cricket, Rajini, Facebook, Mac

When I was studying in schools, I've noticed that Rajinikanth fans were insane and irrational. Of late, I'm noticing such attitude with cricket fans who take sportive things so serious and take serious things so sportive--moronic. Similarly I'm also noticing Facebook "herdy kids" and Mac fanatics (though I agree that iPhone is better, but can't agree that Mac is better for it's "usability").