Code injection

The sanitizeglobals function in CodeIgniter 1.5.3 before 20070628 allows remote attackers to unset arbitrary global variables with unspecified impact, as demonstrated by a SERVER cookie...

CVE-2007-3706

The CVE-2007-3706 entry relates to CodeIgniter 1.5.3 before 20070628, where the _sanitize_globals function can allow a remote attacker to unset arbitrary global variables, demonstrated via a _SERVER cookie. This indicates a vulnerability in the input sanitization routine affecting global state, w...