Sql injection

2018-02-2116:29:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.9%

JSON

SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute arbitrary SQL commands via vectors involving the offset variable.

CPENameOperatorVersion
codeigniterlt2.2.4

CPE	Name	Operator	Version
	codeigniter	lt	2.2.4

References

forum.codeigniter.com/thread-62743.html

github.com/bcit-ci/CodeIgniter/commit/0dde92def6b9f276f05ff77abb07ead318f9ec23

github.com/bcit-ci/CodeIgniter/issues/4020

www.codeigniter.com/userguide2/changelog.html