CVE-2024-41344

A Cross-Site Request Forgery CSRF in Codeigniter 3.1.13 allows attackers to arbitrarily change the Administrator password and escalate privileges...

CVE-2024-41344

The Codeigniter 3.1.13 PHP web framework is vulnerable to a Cross-Site Request Forgery (CSRF) . This flaw allows an attacker to arbitrarily change the Administrator password and achieve privilege escalation . While the documentation identifies the vulnerability and its potential impact, it explic...

PT-2024-29362 · Unknown · Codeigniter

Name of the Vulnerable Software and Affected Versions: Codeigniter version 3.1.13 Description: A Cross-Site Request Forgery CSRF issue allows attackers to arbitrarily change the Administrator password and escalate privileges. Recommendations: For Codeigniter version 3.1.13, update to a newer...

CodeIgniter security vulnerabilities

CodeIgniter is a lightweight, fast, flexible and secure PHP full-stack web framework open-sourced by Codeigniter. A security vulnerability exists in CodeIgniter version 3.1.13, which stems from the inclusion of a cross-site request forgery issue. An attacker can use this vulnerability to change t...

CVE-2024-41344: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in Codeigniter 3.1.13 allows attackers to arbitrarily change the Administrator password and escalate privileges...

ASIS 3.2.0 SQL Injection Vulnerability

Aplikasi Sistem Sekolah using CodeIgniter 3 versions 3.0.0 through 3.2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

ASIS 3.2.0 SQL Injection

============================================================================================================================================ | Title : ASIS | Aplikasi Sistem Sekolah using CodeIgniter 3 - SQL Injection Authentication Bypass | | Author : checkgue | | Tested on : windows 10 Home /...

CVE-2024-45622

ASIS aka Aplikasi Sistem Sekolah using CodeIgniter 3 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass...

CVE-2024-45622

ASIS aka Aplikasi Sistem Sekolah using CodeIgniter 3 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass...

PT-2024-31712

Name of the Vulnerable Software and Affected Versions: ASIS aka Aplikasi Sistem Sekolah using CodeIgniter 3 versions 3.0.0 through 3.2.0 Description: The issue allows attackers to inject SQL through the "index.php" file, which can be exploited to bypass authentication. This is achieved by injecti...

CVE-2024-45622

The ASIS (Aplikasi Sistem Sekolah using CodeIgniter 3) application, versions 3.0.0 through 3.2.0 , is vulnerable to an SQL injection flaw within the index.php file. The root cause is the improper neutralization of special elements in the username variable, which allows unauthenticated attackers t...

CVE-2024-45622: Improper Neutralization of Special Elements used in an SQL Command

ASIS aka Aplikasi Sistem Sekolah using CodeIgniter 3 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass...

CVE-2024-45622

ASIS aka Aplikasi Sistem Sekolah using CodeIgniter 3 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass...

ASIS security vulnerabilities

ASIS Aplikasi Sistem Sekolah using CodeIgniter is a school system application with the Codeigniter framework by the individual developer Mahmud siregar. A security vulnerability exists in ASIS versions 3.0.0 through 3.2.0 that stems from allowing a user to bypass authentication...

Mini Inventory and Sales Management System security vulnerabilities

Mini Inventory and Sales Management System is a small inventory and sales management system written in PHP CodeIgniter framework that supports MySQL and Sqlite3 databases. A security vulnerability exists in Mini Inventory and Sales Management System. An attacker can exploit this vulnerability to...

CVE-2024-6526

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

CVE-2024-6526 CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

CVE-2024-6526

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

CVE-2024-6526

CVE-2024-6526 affects CodeIgniter Ecommerce-CodeIgniter-Bootstrap. The vulnerability arises from manipulation of the arguments search_title, catName, sub, name, and categorie, which leads to cross-site scripting (XSS). It can be exploited remotely, and public exploits/ PoC have been disclosed. A ...

CVE-2024-6526 CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...