Ecommerce-codeigniter-bootstrap vulnerabilities

3 known vulnerabilities in Ecommerce-codeigniter-bootstrap from Ecommerce Codeigniter Bootstrap Project. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Ecommerce-codeigniter-bootstrap: Improper Control of Generation of Code

  CVE-2024-31823Apr 29, 2024Ecommerce Codeigniter Bootstrap ProjectEPSS 1.67%

  An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component.

• 9.8 Critical severity

  ecommerce_codeigniter_bootstrap: Improper Control of Generation of Code

  CVE-2024-31822Apr 29, 2024Ecommerce Codeigniter Bootstrap ProjectEPSS 1.92%

  An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component.

• 9.8 Critical severity

  ecommerce_codeigniter_bootstrap: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-31820Apr 29, 2024Ecommerce Codeigniter Bootstrap ProjectEPSS 1.92%

  An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component.