← All advisories

Unrated severityOSV Advisory· Published Feb 21, 2019· Updated Aug 4, 2024

CVE-2019-8979

CVE-2019-8979

Description

Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Kohanaframework/KohanaOSV2 versions
3.0, 3.0.1, 3.0.1.1, …+ 1 more
- (no CPE)range: 3.0, 3.0.1, 3.0.1.1, …
- (no CPE)range: <=3.3.6

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.

CVE-2019-8979 · VYPR