VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 7, 2022· Updated Jun 17, 2026

CVE-2022-40825

CVE-2022-40825

Description

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php where_in() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Codeigniter/Codeigniter5 versions
    cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*range: >=3.0,<=3.1.13
    • cpe:2.3:a:codeigniter:codeigniter:3.0:-:*:*:*:*:*:*
    • cpe:2.3:a:codeigniter:codeigniter:3.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:codeigniter:codeigniter:3.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:codeigniter:codeigniter:3.0:rc:*:*:*:*:*:*
  • B.C. Institute of Technology/CodeIgniterdescription
  • B.C. Institute Of Technology/CodeIgniterllm-fuzzy
    Range: <=3.1.13
  • osv-coords
    pkg:bitnami/codeigniter
    Range: >= 3.0.0, < 3.1.13

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.