CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Clear
More filters (active)

Page 1 (more results available)

CVE-2025-54418 CRITICAL

CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability

CVSS 9.8 EPSS 1.55% Jul 28, 2025
CVE-2025-24013 MEDIUM

CodeIgniter validation of header name and value

CVSS 5.3 EPSS 0.50% Jan 20, 2025
CVE-2024-41344 HIGH

A Cross-Site Request Forgery (CSRF) in Codeigniter 3.1.13 allows attackers to arbitrarily change the Administrator password and escalate privileges.

CVSS 7.5 EPSS 0.23% Oct 15, 2024
CVE-2024-6526 MEDIUM

CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting

CVSS 5.3 EPSS 0.52% Jul 5, 2024
CVE-2024-29904 HIGH

CodeIgniter4 Language class DoS Vulnerability

CVSS 7.5 EPSS 0.77% Mar 29, 2024
CVE-2023-48707 MEDIUM

Cleartext Storage of Sensitive Information in codeigniter4/shield

CVSS 6.5 EPSS 0.28% Nov 24, 2023
CVE-2023-48708 MEDIUM

Insertion of Sensitive Information into Log in codeigniter4/shield

CVSS 6.5 EPSS 0.63% Nov 24, 2023
CVE-2023-46240 HIGH

CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment

CVSS 7.5 EPSS 0.62% Oct 31, 2023
CVE-2023-32692 CRITICAL

Remote Code Execution Vulnerability in Validation Placeholders

CVSS 9.8 EPSS 1.13% May 30, 2023
CVE-2023-27580 HIGH

CodeIgniter Shield Password Shucking Vulnerability

CVSS 7.5 EPSS 0.52% Mar 13, 2023
CVE-2022-46170 CRITICAL

CodeIgniter is vulnerable to improper authentication via Session Handlers

CVSS 9.8 EPSS 0.84% Dec 22, 2022
CVE-2022-23556 HIGH

CodeIgniter is vulnerable to IP address spoofing when using proxy

CVSS 7.5 EPSS 0.37% Dec 22, 2022
CVE-2022-40835 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php. Note: Multiple third parties have di…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-40834 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_not_like() function. Note: Multipl…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-40833 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where_in() function. Note: Multipl…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-40832 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php having() function. Note: Multiple thi…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-40831 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php like() function. Note: Multiple third…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-40830 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php where_not_in() function. Note: Multip…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-40829 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_like() function. Note: Multiple th…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-40828 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where_not_in() function. Note: Mul…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-40827 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php where() function. Note: Multiple thir…

CVSS 9.8 EPSS 0.92% Oct 7, 2022
CVE-2022-40826 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_having() function. Note: Multiple…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-40825 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php where_in() function. Note: Multiple t…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-40824 CRITICAL

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where() function. Note: Multiple t…

CVSS 9.8 EPSS 0.96% Oct 7, 2022
CVE-2022-39284 MEDIUM

Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4

CVSS 4.3 EPSS 0.91% Oct 6, 2022

Showing 1 to 25 CVEs · page 1 (more available)