ASIS - SQL Injection Authentication Bypass

ASIS aka Aplikasi Sistem Sekolah using CodeIgniter 3 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass. id: CVE-2024-45622 info: name: ASIS - SQL Injection Authentication Bypass author: s4e-io severity: critical description: | ASIS aka Aplikasi Sistem Sekolah...

CVE-2022-41446

CVE-2022-41446 Privilegienausweitung im Teachers Record Management System mit CodeIgnitor Vorgeschlagene Beschreibung Ein Problem mit der Zugriffskontrolle in /Admin/dashboard.php des Record Management Systems mit CodeIgniter v1.0 ermöglicht es Angreifern, auf Benutzerdaten zuzugreifen und diese ...

CVE-2022-41445

CVE-2022-41445 Cross Site Scripting nel sistema di gestione delle registrazioni degli insegnanti che utilizza CodeIgnitor Descrizione suggerita Una vulnerabilità di cross-site scripting XSS nel Record Management System che utilizza CodeIgniter 1.0 consente agli attaccanti di eseguire script web...

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting nel Blood Donor Management System Using CodeIgniter - 1.0 Descrizione suggerita Phpgurukul Blood Donor Management System 1.0 consente Cross Site Scripting tramite la funzione Aggiungi nome gruppo sanguigno. Informazioni aggiuntive PoC:...

CVE-2022-38813

CVE-2022-38813 Vertikale Privilegienerweiterung über Benutzerparameter im Blood Donor Management System mit Codeigniter v 1.0 Technische Beschreibung: Blood Donor Management System 1.0 schränkt den Zugriff auf admin/dashboard.php nicht ordnungsgemäß ein, wodurch Angreifer auf alle Benutzerdaten...

CVE-2026-63223

CVE-2026-63223 — CodeIgniter 4 Datei-Upload-RCE Magic-Bytes-Umgehung → isimage/mimein → PHP-Webshell → RCE Übersicht CVE-2026-63223 ist eine kritische CVSS 9.8 nicht authentifizierte Schwachstelle zur Remote-Codeausführung in CodeIgniter 4 , einem PHP-Webframework für Full-Stack-Anwendungen, die...

CVE-2023-32692-CodeIgniter4

CVE-2023-32692 — Iniezione di regole di validazione in CodeIgniter 4 CVE-2023-32692 è una vulnerabilità di code injection nel framework PHP CodeIgniter 4, che interessa le versioni dalla 4.0.0 alla 4.3.4. È stata corretta nella versione 4.3.5 rilasciata a giugno 2023. Questo è un ambiente demo pe...

CVE-2026-63223-POC

CVE-2026-63223 PoC — RCE tramite upload di file in CodeIgniter 4 CVSS 9.8 Critico | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE-434 : Upload senza restrizioni di file con tipo pericoloso Corretto in : CodeIgniter 4 v4.7.4 Avviso di sicurezza : GHSA-mmj4-63m4-r6h5 Riassunto della vulnerabilità Le rego...

CodeIgniterXor

CodeIgniterXor Script PoC per decodificare i cookie di sessione di CodeIgniter = 2.1.4 che utilizzano il metodo xorencode. Dettagli completi disponibili nel seguente post del blog: https://www.dionach.com/blog/codeigniter-session-decoding-vulnerability Utilizzo break.py Questo è lo script...

EasyAppointments 1.5.1 - Blind SQL Injection

Exploit Title: EasyAppointments 1.5.1 - Blind SQL Injection Google Dork: N/A backend login required Date: 07/27/2026 Exploit Author: Michael Chesang Vendor Homepage: https://easyappointments.org Software Link: https://github.com/alextselegidis/easyappointments/releases Version: = 1.5.1 REQUIRED...

EasyAppointments 1.5.1 Blind SQL Injection

A blind SQL injection vulnerability exists in the orderby parameter of the /index.php/customers/search endpoint in EasyAppointments versions 1.5.1 and below. The parameter is passed unsanitized to CodeIgniter 3 Query Builder orderby. Parenthesized subqueries bypass backtick escaping via CI3's...

EUVD-2026-51399

CodeIgniter: Uploaded file extension validation bypass in isimage and mimein rules...

GHSA-MMJ4-63M4-R6H5 CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules

Impact This is an unsafe file upload validation vulnerability that can lead to remote code execution in vulnerable application configurations. Applications are impacted when they: - validate uploads using isimage or mimein without an independent safe extension check, such as extin on patched...

CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules

Impact This is an unsafe file upload validation vulnerability that can lead to remote code execution in vulnerable application configurations. Applications are impacted when they: - validate uploads using isimage or mimein without an independent safe extension check, such as extin on patched...

EUVD-2026-51398

CodeIgniter: Path traversal in UploadedFile::move when using client-provided filenames...

GHSA-HHMC-Q9HP-R662 CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames

Impact In affected versions, calling UploadedFile::move without a second argument uses the client-provided filename without sanitization. Depending on the destination path and server configuration, an attacker can supply a filename containing path traversal sequences e.g. ../../public/shell.php t...

EUVD-2026-51397

CodeIgniter: SQL injection in Query Builder deleteBatch when used with where conditions...

GHSA-C9W5-RWH3-7PM9 CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions

Impact A SQL injection vulnerability exists in the Query Builder's deleteBatch method. When deleteBatch is used together with where conditions, the bound values from the WHERE clause are substituted directly into the generated SQL with their escape flag ignored, so they are never escaped or quote...

CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions

Impact A SQL injection vulnerability exists in the Query Builder's deleteBatch method. When deleteBatch is used together with where conditions, the bound values from the WHERE clause are substituted directly into the generated SQL with their escape flag ignored, so they are never escaped or quote...

GHSA-7WMF-PW8J-MC78 CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()

Impact IncomingRequest::isSecure trusted the X-Forwarded-Proto and Front-End-Https headers from any incoming request. In affected deployments, an attacker could spoof these headers and cause the application to incorrectly treat an HTTP request as secure. This may impact applications that rely on...