Skip to content

Codeigniter · weakness class

SQL Injection

13 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

  1. SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute arbitrary SQL commands via vectors invol…CVE-2015-5725Codeigniter · 2.3% likely

    CWE-89

  2. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php. Note: Multiple third parties have disputed this as not a…CVE-2022-40835Codeigniter · 1.1% likely

    CWE-89

  3. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_not_like() function. Note: Multiple third parties have…CVE-2022-40834Codeigniter · 1.1% likely

    CWE-89

  4. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where_in() function. Note: Multiple third parties have…CVE-2022-40833Codeigniter · 1.1% likely

    CWE-89

  5. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php having() function. Note: Multiple third parties have disp…CVE-2022-40832Codeigniter · 1.1% likely

    CWE-89

  6. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php like() function. Note: Multiple third parties have disput…CVE-2022-40831Codeigniter · 1.1% likely

    CWE-89

  7. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php where_not_in() function. Note: Multiple third parties hav…CVE-2022-40830Codeigniter · CVSS 9.8 · 1.1% likely

    CWE-89

  8. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_like() function. Note: Multiple third parties have dis…CVE-2022-40829Codeigniter · CVSS 9.8 · 1.1% likely

    CWE-89

  9. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where_not_in() function. Note: Multiple third parties…CVE-2022-40828Codeigniter · CVSS 9.8 · 1.1% likely

    CWE-89

  10. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_having() function. Note: Multiple third parties have d…CVE-2022-40826Codeigniter · CVSS 9.8 · 1.1% likely

    CWE-89

  11. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php where_in() function. Note: Multiple third parties have di…CVE-2022-40825Codeigniter · 1.1% likely

    CWE-89

  12. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_where() function. Note: Multiple third parties have di…CVE-2022-40824Codeigniter · CVSS 9.8 · 1.1% likely

    CWE-89

  13. B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php where() function. Note: Multiple third parties have dispu…CVE-2022-40827Codeigniter · CVSS 9.8 · 1.0% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.