Codeigniter vulnerabilities

Products

• Codeigniter 41
• Ecommerce-codeigniter-bootstrap 7
• Shield 4

Newest

• codeigniter ecommerce-codeigniter-bootstrap kirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserialization CVE-2026-14637 8.8 HighJuly 4, 2026
• codeigniter ecommerce-codeigniter-bootstrap kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.php do_upload_others_images path traversal CVE-2026-14636 5.3 MediumJuly 4, 2026
• codeigniter ecommerce-codeigniter-bootstrap kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversal CVE-2026-14635 6.9 MediumJuly 4, 2026
• codeigniter ecommerce-codeigniter-bootstrap kirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Controller.php checkForPostRequests cross site scripting CVE-2026-14634 5.3 MediumJuly 4, 2026
• codeigniter ecommerce-codeigniter-bootstrap kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scripting CVE-2026-14633 5.3 MediumJuly 4, 2026
• codeigniter ecommerce-codeigniter-bootstrap kirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirect CVE-2026-14632 5.3 MediumJuly 4, 2026
• codeigniter, codeigniter4 +1 more CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability CVE-2025-54418 Fix available 9.8 CriticalJuly 28, 2025
• codeigniter, codeigniter4 +1 more CodeIgniter validation of header name and value CVE-2025-24013 Fix available 5.3 MediumJanuary 20, 2025
• codeigniter A Cross-Site Request Forgery (CSRF) in Codeigniter 3.1.13 allows attackers to arbitrarily change... CVE-2024-41344 7.5 HighOctober 15, 2024
• codeigniter, codeigniter ecommerce-codeigniter-bootstrap +1 more CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting CVE-2024-6526 5.3 MediumJuly 5, 2024
• codeigniter, codeigniter4 +1 more CodeIgniter4 Language class DoS Vulnerability CVE-2024-29904 Fix available 7.5 HighMarch 29, 2024
• codeigniter shield Cleartext Storage of Sensitive Information in codeigniter4/shield CVE-2023-48707 Fix available 5.0 MediumNovember 23, 2023
• codeigniter shield Insertion of Sensitive Information into Log in codeigniter4/shield CVE-2023-48708 Fix available 5.0 MediumNovember 23, 2023
• codeigniter, codeigniter4 +1 more CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment CVE-2023-46240 Fix available 7.5 HighOctober 30, 2023
• codeigniter, codeigniter4 +1 more Remote Code Execution Vulnerability in Validation Placeholders CVE-2023-32692 Public exploitFix available 9.8 CriticalMay 22, 2023
• codeigniter shield CodeIgniter Shield Password Shucking Vulnerability CVE-2023-27580 Fix available 7.5 HighMarch 13, 2023
• codeigniter, codeigniter4 +1 more CodeIgniter is vulnerable to improper authentication via Session Handlers CVE-2022-46170 Fix available 8.6 HighDecember 22, 2022
• codeigniter, codeigniter4 +1 more CodeIgniter is vulnerable to IP address spoofing when using proxy CVE-2022-23556 Fix available 7.0 HighDecember 22, 2022
• codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40835 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40834 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40833 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40832 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40831 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40830 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40829 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40828 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40827 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• bcit-ci codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40826 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40825 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• bcit-ci codeigniter B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system... CVE-2022-40824 Fix availableDisputed 9.8 CriticalOctober 7, 2022
• codeigniter, codeigniter4 +1 more Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4 CVE-2022-39284 Fix available 2.6 LowOctober 6, 2022
• codeigniter, codeigniter shield +1 more SameSite may allow cross-site request forgery (CSRF) protection to be bypassed CVE-2022-35943 Fix available 5.9 MediumAugust 12, 2022
• codeigniter, codeigniter4 +1 more Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4 CVE-2022-24712 Fix available 6.3 MediumFebruary 28, 2022
• codeigniter, codeigniter4 +1 more Remote CLI Command Execution Vulnerability in CodeIgniter4 CVE-2022-24711 Fix available 9.4 CriticalFebruary 28, 2022
• codeigniter, codeigniter4 +1 more Cross-site Scripting Vulnerability in CodeIgniter4 CVE-2022-21715 Fix available 5.4 MediumJanuary 24, 2022
• codeigniter, codeigniter4 +1 more Deserialization of Untrusted Data in Codeigniter4 CVE-2022-21647 Fix available EPSS 37.7% 7.7 HighJanuary 4, 2022
• codeigniter CodeIgniter Improper Privilege Management CVE-2020-10793 Fix available 8.8 HighMarch 23, 2020
• codeigniter EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xss_clean() Filter and perform... CVE-2012-1915 Public exploit 6.1 MediumJanuary 9, 2020
• codeigniter CodeIgniter Session Fixation Vulnerability CVE-2018-12071 Fix available 9.8 CriticalJune 17, 2018
• codeigniter SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before... CVE-2015-5725 9.8 CriticalFebruary 21, 2018
• codeigniter The xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an... CVE-2013-4891 6.1 MediumFebruary 21, 2018
• codeigniter CodeIgniter HTTP Header Injection CVE-2017-1000247 Fix available 7.5 HighNovember 17, 2017
• codeigniter CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging... CVE-2014-8686 Public exploit EPSS 37.2% 9.8 CriticalSeptember 19, 2017
• codeigniter, kohanaframework kohana +1 more CodeIgniter and Kohana vulnerable to PHP Object Injection CVE-2014-8684 Public exploitFix available EPSS 72.2% 9.8 CriticalSeptember 19, 2017
• codeigniter CodeIgniter arbitrary code execution CVE-2016-10131 Fix available 9.8 CriticalJanuary 12, 2017
• codeigniter CodeIgniter 1.7.2 allows remote attackers to obtain sensitive information via a direct request to... CVE-2011-3719 5.0 MediumSeptember 23, 2011
• codeigniter CRLF injection vulnerability in the redirect function in url_helper.php in CodeIgniter 1.5.3... CVE-2007-3709 5.0 MediumJuly 11, 2007
• codeigniter Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote... CVE-2007-3708 4.3 MediumJuly 11, 2007
• codeigniter Directory traversal vulnerability in index.php in CodeIgniter 1.5.3 before 20070628, when... CVE-2007-3707 5.0 MediumJuly 11, 2007
• codeigniter The _sanitize_globals function in CodeIgniter 1.5.3 before 20070628 allows remote attackers to... CVE-2007-3706 2.1 LowJuly 11, 2007