codeigniter vulnerabilities

2 known vulnerabilities in codeigniter from Bcit-ci. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  codeigniter: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-40826Oct 7, 2022Bcit-ciEPSS 1.09%

  B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_having() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

• 9.8 Critical severity

  codeigniter: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-40824Oct 7, 2022Bcit-ciEPSS 1.09%

  B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where() function. Note: Multiple third parties have disputed this as not a valid vulnerability.