CodeIgniter kayıtları
CodeIgniter üreticisine ait 43 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 2 tanesi için hazır saldırı aracı var.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 2 · %4,7
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %46,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')13
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-310 Cryptographic Issues2
- CWE-20 Improper Input Validation2
- CWE-312 Cleartext Storage of Sensitive Information1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
43 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
61Bu hafta | CVE-2014-8684Silahlaştırılmış | CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies andcodeigniter · codeigniter · CWE-310 | Kritik9,8 | %72,119 Eyl 2017 |
60Bu hafta | CVE-2014-8686Silahlaştırılmış | CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption schcodeigniter · codeigniter · CWE-310 | Kritik9,8 | %37,219 Eyl 2017 |
50Planlayın | CVE-2022-21647İstismar yok | Deserialization of Untrusted Data in Codeigniter4codeigniter · codeigniter · CWE-502 | Kritik9,8 | %37,64 Oca 2022 |
40Planlayın | CVE-2016-10131İstismar yok | system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the emaicodeigniter · codeigniter · CWE-74 | Kritik9,8 | %3,112 Oca 2017 |
40Planlayın | CVE-2015-5725İstismar yok | SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute acodeigniter · codeigniter · CWE-89 | Kritik9,8 | %2,321 Şub 2018 |
39İzleyin | CVE-2018-12071İstismar yok | A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled.codeigniter · codeigniter · CWE-384 | Kritik9,8 | %1,517 Haz 2018 |
39İzleyin | CVE-2025-54418İstismar yok | CodeIgniter4's ImageMagick Handler has Command Injection Vulnerabilitycodeigniter · codeigniter · CWE-78 | Kritik9,8 | %1,528 Tem 2025 |
39İzleyin | CVE-2022-24711İstismar yok | Remote CLI Command Execution Vulnerability in CodeIgniter4codeigniter · codeigniter · CWE-20 | Kritik9,8 | %1,128 Şub 2022 |
39İzleyin | CVE-2023-32692Kavram kanıtı | Remote Code Execution Vulnerability in Validation Placeholderscodeigniter · codeigniter · CWE-94 | Kritik9,8 | %1,130 May 2023 |
39İzleyin | CVE-2022-40835İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40824İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40825İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40826İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40828İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40829İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40830İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40831İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40832İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40833İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40834İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-40827İstismar yok | B.C.codeigniter · codeigniter · CWE-89 | Kritik9,8 | %1,07 Eki 2022 |
39İzleyin | CVE-2022-46170İstismar yok | CodeIgniter is vulnerable to improper authentication via Session Handlerscodeigniter · codeigniter · CWE-287 | Kritik9,8 | %0,922 Ara 2022 |
36İzleyin | CVE-2020-10793İstismar yok | CodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the "Select Role of the User" page.codeigniter · codeigniter · CWE-269 | Yüksek8,8 | %1,823 Mar 2020 |
35İzleyin | CVE-2022-35943İstismar yok | SameSite may allow cross-site request forgery (CSRF) protection to be bypassedcodeigniter · codeigniter · CWE-352 | Yüksek8,8 | %0,612 Ağu 2022 |
35İzleyin | CVE-2022-24712İstismar yok | Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4codeigniter · codeigniter · CWE-352 | Yüksek8,8 | %0,528 Şub 2022 |
- CVE-2014-868461Bu hafta
CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies and
KritikCVSS 9,8SilahlaştırılmışEPSS %72codeigniter · codeigniter19 Eyl 2017
- CVE-2014-868660Bu hafta
CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption sch
KritikCVSS 9,8SilahlaştırılmışEPSS %37codeigniter · codeigniter19 Eyl 2017
- CVE-2022-2164750Planlayın
Deserialization of Untrusted Data in Codeigniter4
KritikCVSS 9,8İstismar yokEPSS %37codeigniter · codeigniter4 Oca 2022
- CVE-2016-1013140Planlayın
system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the emai
KritikCVSS 9,8İstismar yokEPSS %3codeigniter · codeigniter12 Oca 2017
- CVE-2015-572540Planlayın
SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute a
KritikCVSS 9,8İstismar yokEPSS %2codeigniter · codeigniter21 Şub 2018
- CVE-2018-1207139İzleyin
A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter17 Haz 2018
- CVE-2025-5441839İzleyin
CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter28 Tem 2025
- CVE-2022-2471139İzleyin
Remote CLI Command Execution Vulnerability in CodeIgniter4
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter28 Şub 2022
- CVE-2023-3269239İzleyin
Remote Code Execution Vulnerability in Validation Placeholders
KritikCVSS 9,8Kavram kanıtıEPSS %1codeigniter · codeigniter30 May 2023
- CVE-2022-4083539İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4082439İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4082539İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4082639İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4082839İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4082939İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4083039İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4083139İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4083239İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4083339İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4083439İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4082739İzleyin
B.C.
KritikCVSS 9,8İstismar yokEPSS %1codeigniter · codeigniter7 Eki 2022
- CVE-2022-4617039İzleyin
CodeIgniter is vulnerable to improper authentication via Session Handlers
KritikCVSS 9,8İstismar yokEPSS %0codeigniter · codeigniter22 Ara 2022
- CVE-2020-1079336İzleyin
CodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the "Select Role of the User" page.
YüksekCVSS 8,8İstismar yokEPSS %1codeigniter · codeigniter23 Mar 2020
- CVE-2022-3594335İzleyin
SameSite may allow cross-site request forgery (CSRF) protection to be bypassed
YüksekCVSS 8,8İstismar yokEPSS %0codeigniter · codeigniter12 Ağu 2022
- CVE-2022-2471235İzleyin
Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4
YüksekCVSS 8,8İstismar yokEPSS %0codeigniter · codeigniter28 Şub 2022