VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 7, 2022· Updated Jun 17, 2026

CVE-2022-40824

CVE-2022-40824

Description

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • osv-coords
    pkg:bitnami/codeigniter
    Range: >= 3.0.0, < 3.1.13
  • Codeigniter/Codeigniterllm-fuzzy6 versions
    <=3.1.13+ 5 more
    • (no CPE)range: <=3.1.13
    • cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*range: >=3.0,<=3.1.13
    • cpe:2.3:a:codeigniter:codeigniter:3.0:-:*:*:*:*:*:*
    • cpe:2.3:a:codeigniter:codeigniter:3.0:rc:*:*:*:*:*:*
    • cpe:2.3:a:codeigniter:codeigniter:3.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:codeigniter:codeigniter:3.0:rc3:*:*:*:*:*:*
  • B.C. Institute of Technology/CodeIgniterdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.