← All advisories

Critical severity9.8OSV Advisory· Published Feb 23, 2019· Updated Jun 17, 2026

CVE-2019-9047

CVE-2019-9047

Description

GoRose v1.0.4 has SQL Injection when the order_by or group_by parameter can be controlled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Gohouse/GoroseOSV
Range: 0.6, 0.7.0, 0.7.1, …
GoRose/GoRosellm-create
Range: =1.0.4

Patches

Vulnerability mechanics

References

1

github.com/huzr2018/orderby_SQLi/tree/master/gorosenvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.