critical9.8
CVE-2022-40833
B.C.
Impact
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where_in() function. Note: Multiple third parties have disputed this as not a valid vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codeigniter | Codeigniter | from 3.0 through 3.1.13 Version 3.0 |