Known Vulnerabilities for products from Kohanaframework
Listed below are 3 of the newest known vulnerabilities associated with the vendor "Kohanaframework".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-8979 json | Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled. | 9.8 - CRITICAL | 2019-02-21 | 2019-04-12 |
| CVE-2016-10510 json | Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject a... | 6.1 - MEDIUM | 2017-08-31 | 2021-03-31 |
| CVE-2014-8684 json | CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof sess... | 9.8 - CRITICAL | 2017-09-19 | 2017-09-28 |
Known software with vulnerabilities from Kohanaframework
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Kohanaframework | Kohana | 3.0 |