1107 matches found
CodeIgniter SQL注入漏洞
CodeIgniter is an open source web framework written in PHP. A SQL injection vulnerability exists in CodeIgniter version 3.1.13 and earlier versions, which stems from a SQL injection problem in the orwhere method in the systemdatabaseDBquerybuilder.php location...
CVE-2022-40826
CVE-2022-40826 affects CodeIgniter up to version 3.1.13. The vulnerability is a SQL injection in the or_having() function of the system/database/DB_query_builder.php. Root cause per sources is improper handling in or_having, enabling attacker-controlled SQL execution. Impact is described as high/...
CVE-2022-40833
CVE-2022-40833 affects CodeIgniter versions <= 3.1.13. The underlying issue is an SQL injection in the or_where_in() function within system/database/DB_query_builder.php, leading to possible data disclosure/modification and service impact as reflected by the CVSS v3.1 base score of 9.8 (CRITIC...
PT-2022-25567 · Unknown · Codeigniter
Name of the Vulnerable Software and Affected Versions: CodeIgniter versions 3.1.13 and earlier Description: The issue concerns a SQL Injection vulnerability via the or not like function in the system/database/DB query builder.php file. Note that the validity of this issue has been disputed by...
CVE-2022-40832
CodeIgniter up to version 3.1.13 is affected by an SQL injection in the having() path of the DB query builder (system/database/DB_query_builder.php). The vulnerability is cited across multiple feeds (CodeIgniter <=3.1.13; some parties dispute its validity). Impact is described as SQL injection...
CVE-2022-40828
B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwherenotin function. Note: Multiple third parties have disputed this as not a valid vulnerability...
CVE-2022-40835
CVE-2022-40835 refers to a SQL injection issue in CodeIgniter <= 3.1.13, via the file system/database/DB_query_builder.php. The vulnerability is described as affecting CodeIgniter’s CodeIgniter framework versions up to 3.1.13, with a root cause tied to the DB_query_builder component. The CVE e...
CVE-2022-40831
B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php like function. Note: Multiple third parties have disputed this as not a valid vulnerability...
PT-2022-25561 · Unknown · Codeigniter
Name of the Vulnerable Software and Affected Versions: CodeIgniter versions =3.1.13 Description: The issue concerns SQL Injection via the or like function in the system/database/DB query builder.php file. Note that the validity of this issue has been disputed by multiple third parties...
CVE-2022-39284
CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting $secure or $httponly value to true in Config\Cookie is not reflected in setcookie or Response::setCookie. As a result cookie values are erroneously exposed to scripts. It should be noted that this vulnerability does...
Code injection
CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting $secure or $httponly value to true in Config\Cookie is not reflected in setcookie or Response::setCookie. As a result cookie values are erroneously exposed to scripts. It should be noted that this vulnerability does...
PT-2022-24868 · Unknown · Codeigniter
Name of the Vulnerable Software and Affected Versions: CodeIgniter versions prior to 4.2.7 Description: The issue arises when setting $secure or $httponly value to true in ConfigCookie is not reflected in set cookie or Response::setCookie, resulting in cookie values being erroneously exposed to...
CodeIgniter 安全漏洞
CodeIgniter is an open source web framework written in the PHP language. A security vulnerability exists in CodeIgniter versions prior to 4.2.7 that stems from its incorrect configuration causing cookie values to be incorrectly publicized to scripts...
CVE-2022-39284
CodeIgniter 4 prior to v4.2.7 has a cookie handling bug where setting secure or HttpOnly (Config\Cookie) is not reflected in set_cookie() or Response::setCookie(), causing cookie values to be exposed to scripts. The vulnerability is limited to non-session cookies and does not affect sessions. Aff...
CVE-2022-39284 Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4
CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting $secure or $httponly value to true in Config\Cookie is not reflected in setcookie or Response::setCookie. As a result cookie values are erroneously exposed to scripts. It should be noted that this vulnerability does...
Multix 2.4 Cross Site Request Forgery Vulnerability
Exploit Title: Multix - Multipurpose Website CMS with Codeigniter Cross Site Request Forgery Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/multix-multipurpose-website-cms-with-codeigniter/23537596 Version: Version 2.4 Tested on Ubuntu...
Multix 2.4 Cross Site Scripting
Exploit Title: Multix - Multipurpose Website CMS with Codeigniter Reflected Cross Site Scripting Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/multix-multipurpose-website-cms-with-codeigniter/23537596 Version: Version 2.4 Tested on...
Multix 2.4 Cross Site Request Forgery
Exploit Title: Multix - Multipurpose Website CMS with Codeigniter Cross Site Request Forgery Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/multix-multipurpose-website-cms-with-codeigniter/23537596 Version: Version 2.4 Tested on Ubuntu...