Critical severity9.8NVD Advisory· Published Oct 7, 2022· Updated Jun 17, 2026
CVE-2022-40834
CVE-2022-40834
Description
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_not_like() function. Note: Multiple third parties have disputed this as not a valid vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*range: >=3.0,<=3.1.13
- cpe:2.3:a:codeigniter:codeigniter:3.0:-:*:*:*:*:*:*
- cpe:2.3:a:codeigniter:codeigniter:3.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:codeigniter:codeigniter:3.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:codeigniter:codeigniter:3.0:rc:*:*:*:*:*:*
- B.C. Institute of Technology/CodeIgniterdescription
- Range: <=3.1.13
- Range: <=3.1.13
Patches
Vulnerability mechanics
References
2- github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.mdnvdExploitThird Party Advisory
- github.com/bcit-ci/CodeIgniter/issues/6161nvd
News mentions
0No linked articles in our index yet.