Latest vulnerabilities for vendor "codeigniter"

6.5

First published (updated )

CVE-2023-48707

CodeIgniter ShieldInsertion of Sensitive Information into Log in codeigniter4/shield

6.5

First published (updated )

CVE-2023-48708

Codeigniter CodeigniterCodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment

7.5

First published (updated )

CVE-2023-46240

Codeigniter CodeigniterRemote Code Execution Vulnerability in Validation Placeholders

9.8

First published (updated )

CVE-2023-32692

CodeIgniter ShieldCodeIgniter Shield Password Shucking Vulnerability

7.5

First published (updated )

CVE-2023-27580

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/codeigniter4/frameworkCodeIgniter is vulnerable to IP address spoofing when using proxy

7.5

First published (updated )

CVE-2022-23556

composer/codeigniter4/frameworkCodeIgniter is vulnerable to improper authentication via Session Handlers

9.8

First published (updated )

CVE-2022-46170

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40829

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40834

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40830

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40826

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40828

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40833

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40831

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40835

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40827

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40825

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40832

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2022-40824

composer/codeigniter4/frameworkSecure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4

4.3

First published (updated )

CVE-2022-39284

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Codeigniter CodeigniterSameSite may allow cross-site request forgery (CSRF) protection to be bypassed

8.8

First published (updated )

CVE-2022-35943

composer/codeigniter4/frameworkCross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

8.8

First published (updated )

CVE-2022-24712

composer/codeigniter4/frameworkRemote CLI Command Execution Vulnerability in CodeIgniter4

9.8

First published (updated )

CVE-2022-24711

composer/codeigniter4/frameworkCross-site Scripting Vulnerability in CodeIgniter4

6.1

First published (updated )

CVE-2022-21715

composer/codeigniter4/frameworkDeserialization of Untrusted Data in Codeigniter4

9.8

First published (updated )

CVE-2022-21647

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Codeigniter CodeigniterCodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the …

8.8

First published (updated )

CVE-2020-10793

Codeigniter CodeigniterXSS

6.1

First published (updated )

CVE-2012-1915

composer/codeigniter/frameworkA Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the S…

9.8

First published (updated )

CVE-2018-12071

Codeigniter CodeigniterSQL Injection

9.8

First published (updated )

CVE-2015-5725

Codeigniter CodeigniterXSS

6.1

First published (updated )

CVE-2013-4891

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Codeigniter CodeigniterInput Validation

7.5

First published (updated )

CVE-2017-1000247

Codeigniter CodeigniterCodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallb…

9.8

First published (updated )

CVE-2014-8686

Kohanaframework KohanaCodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remot…

9.8

First published (updated )

CVE-2014-8684

Codeigniter Codeignitersystem/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary …

9.8

First published (updated )

CVE-2016-10131

Codeigniter CodeigniterInfoleak

5

First published (updated )

CVE-2011-3719

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Codeigniter CodeigniterXSS

4.3

First published (updated )

CVE-2007-3708

Codeigniter CodeigniterDirectory traversal vulnerability in index.php in CodeIgniter 1.5.3 before 20070628, when enable_que…

5

First published (updated )

CVE-2007-3707

Codeigniter CodeigniterThe _sanitize_globals function in CodeIgniter 1.5.3 before 20070628 allows remote attackers to unset…

low

2.1

First published (updated )

CVE-2007-3706

Codeigniter CodeigniterCRLF Injection