3 matches found
EUVD-2026-51397
CodeIgniter: SQL injection in Query Builder deleteBatch when used with where conditions...
9.4CVSS5.8AI score0.00612EPSS
SaveExploits0References4
PT-2026-66681
Name of the Vulnerable Software and Affected Versions CodeIgniter versions 4.3.0 through 4.7.3 Description In the Query Builder, the deleteBatch function substitutes bound values from where conditions into generated SQL while ignoring their escape flags. This allows user-controlled condition valu...
9.4CVSS5.8AI score0.00612EPSS
SaveExploits0References13
20