KO
Product
Kohana
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch
Add Kohana to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-8979 | 9.8 | Feb 21 | Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled Affected: through 3.3.6 |
| CVE-2014-8684 | 9.8 | Sep 19 | CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies and consequently conduct PHP object… Affected: 3.2.3; 3.3.0; 3.3.1 |
| CVE-2016-10510 | 6.1 | Aug 31 | Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject arbitrary web script or HTML by bypassing the… Affected: through 3.3.5 |
Showing 3