← All advisories

Critical severity9.8OSV Advisory· Published Feb 21, 2019· Updated Jun 17, 2026

CVE-2019-8979

CVE-2019-8979

Description

Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Kohanaframework/KohanaOSV3 versions
3.0, 3.0.1, 3.0.1.1, …+ 2 more
- (no CPE)range: 3.0, 3.0.1, 3.0.1.1, …
- cpe:2.3:a:kohanaframework:kohana:*:*:*:*:*:*:*:*range: <=3.3.6
- (no CPE)range: <=3.3.6

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.