CVE-2015-5725

critical

Description

SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute arbitrary SQL commands via vectors involving the offset variable.

References

Advisories
More

https://github.com/bcit-ci/CodeIgniter/issues/4020

https://github.com/bcit-ci/CodeIgniter/commit/0dde92def6b9f276f05ff77abb07ead318f9ec23

https://www.codeigniter.com/userguide2/changelog.html

https://forum.codeigniter.com/thread-62743.html

Details

Source: Mitre, NVD

Published: 2018-02-21

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00878

Detections

Analytics