Codeigniter

Codeigniter

44 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2022-46170

  • EPSS 0.84%
  • Veröffentlicht 22.12.2022 19:15:09
  • Zuletzt bearbeitet 21.11.2024 07:30:15

CodeIgniter is a PHP full-stack web framework. When an application uses (1) multiple session cookies (e.g., one for user pages and one for admin pages) and (2) a session handler is set to `DatabaseHandler`, `MemcachedHandler`, or `RedisHandler`, the...

7.5

CVE-2022-23556

Exploit
  • EPSS 0.37%
  • Veröffentlicht 22.12.2022 19:15:09
  • Zuletzt bearbeitet 21.11.2024 06:48:48

CodeIgniter is a PHP full-stack web framework. This vulnerability may allow attackers to spoof their IP address when the server is behind a reverse proxy. This issue has been patched, please upgrade to version 4.2.11 or later, and configure `Config\A...

9.8

CVE-2022-40826

Exploit
  • EPSS 0.93%
  • Veröffentlicht 07.10.2022 11:15:11
  • Zuletzt bearbeitet 21.11.2024 07:22:05

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_having() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

9.8

CVE-2022-40835

Exploit
  • EPSS 0.93%
  • Veröffentlicht 07.10.2022 11:15:11
  • Zuletzt bearbeitet 21.11.2024 07:22:07

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php. Note: Multiple third parties have disputed this as not a valid vulnerability

9.8

CVE-2022-40834

Exploit
  • EPSS 0.93%
  • Veröffentlicht 07.10.2022 11:15:11
  • Zuletzt bearbeitet 21.11.2024 07:22:07

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_not_like() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

9.8

CVE-2022-40833

Exploit
  • EPSS 0.93%
  • Veröffentlicht 07.10.2022 11:15:11
  • Zuletzt bearbeitet 21.11.2024 07:22:07

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where_in() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

9.8

CVE-2022-40832

Exploit
  • EPSS 0.93%
  • Veröffentlicht 07.10.2022 11:15:11
  • Zuletzt bearbeitet 21.11.2024 07:22:06

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php having() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

9.8

CVE-2022-40831

Exploit
  • EPSS 0.93%
  • Veröffentlicht 07.10.2022 11:15:11
  • Zuletzt bearbeitet 21.11.2024 07:22:06

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php like() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

9.8

CVE-2022-40830

Exploit
  • EPSS 0.93%
  • Veröffentlicht 07.10.2022 11:15:11
  • Zuletzt bearbeitet 21.11.2024 07:22:06

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php where_not_in() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

9.8

CVE-2022-40829

Exploit
  • EPSS 0.93%
  • Veröffentlicht 07.10.2022 11:15:11
  • Zuletzt bearbeitet 21.11.2024 07:22:06

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_like() function. Note: Multiple third parties have disputed this as not a valid vulnerability.