Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
codeigniter codeigniter vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-3707
Directory traversal vulnerability in index.php in CodeIgniter 1.5.3 prior to 20070628, when enable_query_strings is true, allows remote malicious users to read arbitrary files via a .. (dot dot) in the c parameter.
Codeigniter Codeigniter 1.5.3
7.5
CVSSv3
CVE-2017-1000247
British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header Injection flaws.
Codeigniter Codeigniter 3.1.3
NA
CVE-2007-3709
CRLF injection vulnerability in the redirect function in url_helper.php in CodeIgniter 1.5.3 allows remote malicious users to inject arbitrary HTTP headers via CRLF sequences in an unspecified parameter, as demonstrated by a Set-Cookie header.
Codeigniter Codeigniter 1.5.3
NA
CVE-2007-3706
The _sanitize_globals function in CodeIgniter 1.5.3 prior to 20070628 allows remote malicious users to unset arbitrary global variables with unspecified impact, as demonstrated by a _SERVER cookie.
Codeigniter Codeigniter 1.5.3
NA
CVE-2007-3708
Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 prior to 20070626 allows remote malicious users to inject arbitrary web script or HTML via (1) String.fromCharCode and (2) malformed nested tag manipulations in an unspecified component, related to insufficient sanitiz...
Codeigniter Codeigniter 1.5.3
9.8
CVSSv3
CVE-2015-3907
CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks.
Codeigniter-restserver Project Codeigniter-restserver 2.7.1
6.1
CVSSv3
CVE-2022-26624
Bootstrap v3.1.11 and v3.3.7 exists to contain a cross-site scripting (XSS) vulnerability via the Title parameter in /vendor/views/add_product.php.
Ecommerce Codeigniter Bootstrap Project Ecommerce Codeigniter Bootstrap -
1 Github repository
6.1
CVSSv3
CVE-2022-35213
Ecommerce-CodeIgniter-Bootstrap before commit 56465f exists to contain a cross-site scripting (XSS) vulnerability via the function base_url() at /blog/blogpublish.php.
Ecommerce-codeigniter-bootstrap Project Ecommerce-codeigniter-bootstrap
2 Github repositories
6.1
CVSSv3
CVE-2020-25087
Ecommerce-CodeIgniter-Bootstrap prior to 2020-08-03 allows XSS in application/modules/admin/views/advanced_settings/languages.php.
Ecommerce-codeigniter-bootstrap Project Ecommerce-codeigniter-bootstrap
6.1
CVSSv3
CVE-2020-25091
Ecommerce-CodeIgniter-Bootstrap prior to 2020-08-03 allows XSS in application/modules/vendor/views/add_product.php.
Ecommerce-codeigniter-bootstrap Project Ecommerce-codeigniter-bootstrap
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege escalation
CVE-2024-20696
CVE-2024-29829
CVE-2024-33999
CVE-2024-35646
physical
CVE-2024-24919
CVE-2024-31030
local users
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »