Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/codeigniter/framework@3.1.2
purl pkg:composer/codeigniter/framework@3.1.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (16)
Advisory Summary Fixed in package version
CVE-2022-40829

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2022-40825

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2022-40830

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2022-40828

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2022-40831

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2022-40834

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2022-40827

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2022-40824

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2022-40826

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2022-40835

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2022-40833

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
CVE-2023-32692
Aliases:
GHSA-m6m8-6gq8-c9fj
Improper Control of Generation of Code ('Code Injection') CodeIgniter is a PHP full-stack web framework. This vulnerability allows attackers to … There are no reported fixed by versions.
CVE-2022-35943
Aliases:
GHSA-5hm8-vh6r-2cjq
Cross-Site Request Forgery (CSRF) Shield is an authentication and authorization framework for CodeIgniter 4. This vulnerability may allow [SameSite Attackers](https://canitakeyoursubdomain.name/) … There are no reported fixed by versions.
CVE-2022-40832

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable … There are no reported fixed by versions.
GHSA-g434-3q2j-hj4r
Aliases:
CVE-2018-12071
CodeIgniter Session Fixation Vulnerability A Session Fixation issue exists in CodeIgniter before 3.1.10 because `session.use_strict_mode` in the Session Library was …
3.1.10
Vulnerable
3.1.10
Vulnerable
CVE-2023-46240
Aliases:
GHSA-hwxf-qxj7-7rfj
Generation of Error Message Containing Sensitive Information CodeIgniter is a PHP full-stack web framework. Prior to CodeIgniter4 version 4.4.3, if … There are no reported fixed by versions.
This package is not known to fix any advisories.