GHSA-27QR-636M-WXG2 codeigniter/framework SQL injection in ODBC database driver

CodeIgniter 3.1.0 addressed a critical security issue within the ODBC database driver. This update includes crucial fixes to mitigate a SQL injection vulnerability, preventing potential exploitation by attackers. It is noteworthy that these fixes render the query builder and escape functions...

codeigniter/framework SQL injection in ODBC database driver

CodeIgniter 3.1.0 addressed a critical security issue within the ODBC database driver. This update includes crucial fixes to mitigate a SQL injection vulnerability, preventing potential exploitation by attackers. It is noteworthy that these fixes render the query builder and escape functions...

GHSA-Q9J3-4GHJ-6H57 Inadequate XSS Prevention in CodeIgniter/Framework Security Library

The xssclean method in the Security Library of CodeIgniter/Framework, specifically in versions before 3.0.3, exhibited a vulnerability that allowed certain Cross-Site Scripting XSS vectors to bypass its intended protection mechanisms. The xssclean method is designed to sanitize input data by...

Inadequate XSS Prevention in CodeIgniter/Framework Security Library

The xssclean method in the Security Library of CodeIgniter/Framework, specifically in versions before 3.0.3, exhibited a vulnerability that allowed certain Cross-Site Scripting XSS vectors to bypass its intended protection mechanisms. The xssclean method is designed to sanitize input data by...

PT-2024-40426

Name of the Vulnerable Software and Affected Versions CodeIgniter/Framework versions prior to 3.0.3 Description The issue concerns the xss clean method in the Security Library, which is intended to sanitize input data and prevent Cross-Site Scripting XSS attacks. However, in affected versions, th...

PT-2024-40014 · Unknown · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter version 3.1.0 and earlier Description: A critical security issue was found in the ODBC database driver, which could lead to SQL injection. This issue has been mitigated with crucial fixes in the update. The query builder and escap...

CVE-2024-31821

SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the manageQuantitiesAndProcurement method of the Ordersmodel.php component...

CVE-2024-31822

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component...

CVE-2024-31823

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...

CVE-2024-31822

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component...

CVE-2024-31820

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component...

CVE-2024-31820

A security vulnerability exists in the Ecommerce-CodeIgniter-Bootstrap online store platform (commit v. d22b54e8915f167a135046ceb857caaf8479c4da ). The flaw allows a remote attacker to achieve arbitrary code execution via the getLangFolderForEdit method within the Languages.php component. While t...

CVE-2024-31822

The Ecommerce-CodeIgniter-Bootstrap online store platform contains an arbitrary code execution vulnerability in the saveLanguageFiles method of the Languages.php component (specifically in commit v. d22b54e8915f167a135046ceb857caaf8479c4da). A remote attacker can exploit this issue to execute arb...

CVE-2024-31823

The Ecommerce-CodeIgniter-Bootstrap online store platform (commit v. d22b54e8915f167a135046ceb857caaf8479c4da ) contains an arbitrary code execution vulnerability. The root cause is located in the removeSecondaryImage method of the Publish.php component, which allows a remote attacker to execute ...

CVE-2024-31822

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component...

CVE-2024-31823

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...

CVE-2024-31820

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component...

CVE-2024-31821

SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the manageQuantitiesAndProcurement method of the Ordersmodel.php component...

CVE-2024-31820

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component...

CVE-2024-31821

SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the manageQuantitiesAndProcurement method of the Ordersmodel.php component...