CVE-2019-8979

2019-02-2105:29:00

Google

osv.dev

8.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.5%

JSON

Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.

CPENameOperatorVersion
kohanaeq3.0.6.2
kohanaeq3.1.0
kohanaeq3.0.4.2
kohanaeq3.2.0-RC2
kohanaeq3.0.1.1
kohanaeq3.0
kohanaeq3.0.2.1
kohanaeq3.0.4
kohanaeq3.3.0
kohanaeqbeta1

Name	Operator	Version
kohana	eq	3.0.6.2
kohana	eq	3.1.0
kohana	eq	3.0.4.2
kohana	eq	3.2.0-RC2
kohana	eq	3.0.1.1
kohana	eq	3.0
kohana	eq	3.0.2.1
kohana	eq	3.0.4
kohana	eq	3.3.0
kohana	eq	beta1

Rows per page:

1-10 of 421

References

github.com/huzr2018/orderby_SQLi