Skip to content
OpenAdvisories

Vendor

codeigniter4

21 known vulnerabilities.

Products

CodeIgniter4 17 shield 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-63223 Public exploit

    CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules

    CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and mime_in upload validation rules do not independently enforce a safe client filename extension, allowing a remote attacker to upload executable content when an application preserve…

    codeigniter4 CodeIgniter4 codeigniter4/framework php-codeigniter-framework Ubuntu Packagist
  • Critical 9.8
    CVE-2023-32692 Public exploit

    Remote Code Execution Vulnerability in Validation Placeholders

    CodeIgniter is a PHP full-stack web framework. This vulnerability allows attackers to execute arbitrary code when you use Validation Placeholders. The vulnerability exists in the Validation library, and validation methods in the controller and in-model valida…

    codeigniter4 CodeIgniter4 codeigniter4/framework Packagist