Unscored CVE-2015-5725 EUVD-2015-5671GHSA-w865-x2vp-v73f

SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute …

Published Feb 21, 2018 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute arbitrary SQL commands via vectors involving the offset variable.

References

https://forum.codeigniter.com/thread-62743.html
https://github.com/bcit-ci/CodeIgniter/issues/4020
https://www.codeigniter.com/userguide2/changelog.html
https://github.com/bcit-ci/CodeIgniter/commit/0dde92def6b9f276f05ff77abb07ead318f9ec23