ko7demo

一个Docker容器化的https://github.com/koseven/kosevenkoseven示例，用于演示CVE-2019-8979，这是一个影响3.3.10之前版本的SQL注入漏洞。 该示例实际上来自https://koseven.dev/documentation/orm/examples/simple文档，我只是添加了Docker部分和PoC漏洞利用。 = CVE-2019-8979...

SUSE CVE-2019-8979

Kohana through 3.3.6 has SQL Injection when the orderby parameter can be controlled...

CVE-2019-8979

Kohana up to 3.3.6 is vulnerable to SQL Injection when the order_by() parameter is controllable. This affects the framework’s query construction (ORM/DB layer) and can impact confidentiality, integrity, and availability as indicated by CVSS metrics in the CVE entry. Available references show the ...