Lucene search
HistoryOct 07, 2022 - 11:15 a.m.
CVE-2022-40829
bc institute of technology
codeigniter
sql injection
db_query_builder.php
or_like() function
cve-2022-40829
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
52.3%
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_like() function. Note: Multiple third parties have disputed this as not a valid vulnerability.
Affected configurations
Node
codeignitercodeigniterRange3.0–3.1.13
ORcodeignitercodeigniterMatch3.0-
ORcodeignitercodeigniterMatch3.0rc
ORcodeignitercodeigniterMatch3.0rc2
ORcodeignitercodeigniterMatch3.0rc3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| codeigniter | codeigniter | * | cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:* |
| codeigniter | codeigniter | 3.0 | cpe:2.3:a:codeigniter:codeigniter:3.0:-:*:*:*:*:*:* |
| codeigniter | codeigniter | 3.0 | cpe:2.3:a:codeigniter:codeigniter:3.0:rc:*:*:*:*:*:* |
| codeigniter | codeigniter | 3.0 | cpe:2.3:a:codeigniter:codeigniter:3.0:rc2:*:*:*:*:*:* |
| codeigniter | codeigniter | 3.0 | cpe:2.3:a:codeigniter:codeigniter:3.0:rc3:*:*:*:*:*:* |
Related
osv
osv
BIT-codeigniter-2022-40829
2024-01-31 15:13:33
prion
prion
Sql injection
2022-10-07 11:15:00
vulnrichment
vulnrichment
CVE-2022-40829
2022-10-07 00:00:00
cve
cve
CVE-2022-40829
2022-10-07 11:15:11
cvelist
cvelist
CVE-2022-40829
2022-10-07 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
52.3%
Related for NVD:CVE-2022-40829