VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 7, 2022· Updated Jun 17, 2026

CVE-2022-40827

CVE-2022-40827

Description

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php where() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

Affected products

8
  • Codeigniter/Codeigniter6 versions
    cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*range: >=3.0,<=3.1.13
    • cpe:2.3:a:codeigniter:codeigniter:3.0:-:*:*:*:*:*:*
    • cpe:2.3:a:codeigniter:codeigniter:3.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:codeigniter:codeigniter:3.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:codeigniter:codeigniter:3.0:rc:*:*:*:*:*:*
    • (no CPE)range: <=3.1.13
  • B.C. Institute of Technology/CodeIgniterdescription
  • osv-coords
    pkg:bitnami/codeigniter
    Range: >= 3.0.0, < 3.1.13

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.