Kohanaframework - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2019-02-21.

Products

• Kohana - 3 CVEs

Newest CVEs of Kohanaframework

• CVE-2019-8979 - CVSS 9.8 (critical), 2019-02-21: Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.
• CVE-2014-8684 - CVSS 9.8 (critical), 2017-09-19: CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies and consequently…
• CVE-2016-10510 - CVSS 6.1 (medium), 2017-08-31: Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject arbitrary web script or HTML by…