CVE-2022-40827

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php where function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CVE-2022-40834

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php ornotlike function. Note: Multiple third parties have disputed this as not a valid vulnerability...

PT-2022-25556 · Unknown · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter versions =3.1.13 Description: The issue concerns SQL Injection via the or where function in the system/database/DB query builder.php file. Note that the validity of this issue has been disputed by multiple third parties...

CVE-2022-40834: Improper Neutralization of Special Elements used in an SQL Command

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php ornotlike function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CodeIgniter SQL injection vulnerability

CodeIgniter is an open source web framework written in PHP. A SQL injection vulnerability exists in CodeIgniter version 3.1.13 and earlier versions, which stems from a SQL injection problem in the having method in the systemdatabaseDBquerybuilder.php location...

CVE-2022-40825

CVE-2022-40825 affects CodeIgniter

PT-2022-25563 · Unknown · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter versions =3.1.13 Description: The issue concerns a SQL Injection vulnerability via the where not in function in the system/database/DB query builder.php file. Note that the validity of this issue has been disputed by multiple thir...

CVE-2022-40833

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwherein function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CVE-2022-40832

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php having function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CVE-2022-40834

CVE-2022-40834 affects CodeIgniter

CVE-2022-40833

CVE-2022-40833 affects CodeIgniter versions <= 3.1.13. The underlying issue is an SQL injection in the or_where_in() function within system/database/DB_query_builder.php, leading to possible data disclosure/modification and service impact as reflected by the CVSS v3.1 base score of 9.8 (CRITIC...

CVE-2022-40829

CodeIgniter 3.x versions

CVE-2022-40827

CVE-2022-40827 affects CodeIgniter up to version 3.1.13. Affects the where() handling in system/database/DB_query_builder.php, enabling SQL injection. Multiple sources note this vulnerability; some third parties dispute its validity. CVSS details in entries indicate high impact (CRITICAL): confid...

CVE-2022-40826

CVE-2022-40826 affects CodeIgniter up to version 3.1.13. The vulnerability is a SQL injection in the or_having() function of the system/database/DB_query_builder.php. Root cause per sources is improper handling in or_having, enabling attacker-controlled SQL execution. Impact is described as high/...

CVE-2022-40825: Improper Neutralization of Special Elements used in an SQL Command

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php wherein function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CVE-2022-40826: Improper Neutralization of Special Elements used in an SQL Command

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orhaving function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CVE-2022-40831: Improper Neutralization of Special Elements used in an SQL Command

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php like function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CVE-2022-40827: Improper Neutralization of Special Elements used in an SQL Command

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php where function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CVE-2022-40828: Improper Neutralization of Special Elements used in an SQL Command

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwherenotin function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CVE-2022-40829: Improper Neutralization of Special Elements used in an SQL Command

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orlike function. Note: Multiple third parties have disputed this as not a valid vulnerability...