CVE-2022-40826

2022-10-0700:00:00

mitre

github.com

codeigniter

sql injection

b.c. institute of technology

AI Score

Confidence

Low

EPSS

0.002

Percentile

52.3%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_having() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:bcit-ci:codeigniter:*:*:*:*:*:*:*:*"
    ],
    "vendor": "bcit-ci",
    "product": "codeigniter",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "3.1.13"
      }
    ],
    "defaultStatus": "unknown"
  }
]