elttam/ko7demo

PoC

A docker-contained koseven hello world to play with SQL injection CVE-2019-8979 affecting versions < 3.3.10

view exploit source poc_in_githubauthor elttampublished 2020-11-02catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-8979US	critical9.8	3.20% (88th)	Exploit	2019-02-21
Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.