Critical severity9.8NVD Advisory· Published Apr 29, 2024· Updated Aug 24, 2026

CVE-2024-31823

Description

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ecommerce-CodeIgniter-Bootstrap/Ecommerce-CodeIgniter-Bootstrapllm-fuzzy2 versions
d22b54e8915f167a135046ceb857caaf8479c4da+ 1 more
- (no CPE)range: d22b54e8915f167a135046ceb857caaf8479c4da
- (no CPE)
kirilkirkov/Ecommerce-CodeIgniter-Bootstrapllm-fuzzy
Range: d22b54e8915f167a135046ceb857caaf8479c4da
Ecommerce Codeigniter Bootstrap Project/Ecommerce Codeigniter Bootstrap
cpe:2.3:a:ecommerce-codeigniter-bootstrap_project:ecommerce-codeigniter-bootstrap:2024-01-02:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/d22b54e8915f167a135046ceb857caaf8479c4danvdPatch
gist.github.com/LioTree/4989e0f20b6a885604dd3178fa4b66b5nvdExploitThird Party Advisory
liotree.github.io/2023/Ecommerce-CodeIgniter-Bootstrap.htmlnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000