3 matches found
EUVD-2026-51397
CodeIgniter: SQL injection in Query Builder deleteBatch when used with where conditions...
9.4CVSS5.6AI score0.00377EPSS
SaveExploits0References4
PT-2026-66681
CodeIgniter is a PHP full-stack web framework. From 4.3.0 through 4.7.3, Query Builder deleteBatch substitutes bound values from where conditions into generated SQL while ignoring their escape flags, allowing user-controlled condition values to be interpreted as SQL. This affects only the...
9.4CVSS5.8AI score0.00377EPSS
SaveExploits0References4
20