CVE-2019-9047

Published February 23rd, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

GoRose v1.0.4 has SQL Injection when the order_by or group_by parameter can be controlled.

huzr2018/orderby_SQLi

GitHub

1