Remote CLI Command Execution Vulnerability in CodeIgniter4

Mô tả

Tham khảo

• codeigniter4/CodeIgniter4 security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2022-24711 · ADVISORY
• codeigniter4/CodeIgniter4 commit 202f41a · WEB
• FriendsOfPHP/security-advisories · WEB
• codeigniter4/CodeIgniter4 · PACKAGE

Lỗ hổng khác của codeigniter4/framework

• CVE-2026-63223NGHIÊM TRỌNG 9.8CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and mime_in upload validation rules do not independently enforce…
• CVE-2026-63222CAO 7.5CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move() without a second argument uses the client-provid…
• CVE-2026-63221NGHIÊM TRỌNG 9.4CodeIgniter is a PHP full-stack web framework. From 4.3.0 through 4.7.3, Query Builder deleteBatch() substitutes bound values from where() c…
• CVE-2026-63220TRUNG BÌNH 4.8CodeIgniter is a PHP full-stack web framework. In versions prior to 4.7.4, IncomingRequest::isSecure() trusted the X-Forwarded-Proto and Fro…
• CVE-2026-48062NGHIÊM TRỌNG 9.8CodeIgniter is a PHP full-stack web framework. Prior to 4.7.3, the ext_in upload validation rule in system/Validation/StrictRules/FileRules.…