Unscored CVE-2022-40833 EUVD-2022-44091GHSA-7x5f-444r-jc46

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where_in() fun…

Published Oct 7, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where_in() function. Note: Multiple third parties have disputed this as not a valid vulnerability.

References

https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md
https://github.com/bcit-ci/CodeIgniter/issues/6161