CVE-2019-8979

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Feb 21, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-89807.5A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of servicCVE-2019-89819.8tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value CVE-2019-89829.6com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leadinCVE-2019-89836.1MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).CVE-2019-89846.1MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).CVE-2019-89859.8On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overfCVE-2019-89867.7The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPCVE-2019-89875.4The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent CVE-2019-89888.1The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent CVE-2019-89894.3The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a vulnerabiliCVE-2019-89908.1The HTTP Connector component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks contains a vulnerability that theoretically allows unCVE-2019-89918.8The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric
CVE-2019-8979: Critical severity, CVSS 9.8 | Vulnix