{"id":"CVE-2022-40835","details":"B.C. Institute of Technology CodeIgniter \u003c=3.1.13 is vulnerable to SQL Injection via system\\database\\DB_query_builder.php. Note: Multiple third parties have disputed this as not a valid vulnerability","aliases":["BIT-codeigniter-2022-40835"],"modified":"2026-10-22T02:45:16.136520637Z","published":"2022-10-07T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/40xxx/CVE-2022-40835.json","cna_assigner":"mitre","isDisputed":true},"references":[{"type":"WEB","url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/40xxx/CVE-2022-40835.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40835"},{"type":"REPORT","url":"https://github.com/bcit-ci/CodeIgniter/issues/6161"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bcit-ci/codeigniter","events":[{"introduced":"3fe79499c5bedb5b3bc4281821776f031f73674e"},{"last_affected":"bcb17eb8ba53a85de154439d0ab8ff1bed047bc9"},{"last_affected":"3fe79499c5bedb5b3bc4281821776f031f73674e"},{"introduced":"38d98bcbbd6e70998999971e9cbb53de12410bbf"},{"last_affected":"4ccc2f80c501d839245915d058f77dea7f1bd3f3"}],"database_specific":{"extracted_events":[{"source":"CPE_RANGE","cpe":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","range":[{"introduced":"3.0"},{"last_affected":"3.1.13"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:codeigniter:codeigniter:3.0:-:*:*:*:*:*:*","range":[{"introduced":"3.0-NA"},{"last_affected":"3.0-NA"}]},{"range":[{"introduced":"3.0-rc"},{"last_affected":"3.0-rc"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:codeigniter:codeigniter:3.0:rc:*:*:*:*:*:*"},{"range":[{"introduced":"3.0-rc2"},{"last_affected":"3.0-rc2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:codeigniter:codeigniter:3.0:rc2:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:codeigniter:codeigniter:3.0:rc3:*:*:*:*:*:*","range":[{"introduced":"3.0-rc3"},{"last_affected":"3.0-rc3"}],"source":"CPE_STRING"}]}}],"versions":["3.0-rc","3.0-rc2","3.0-rc3","3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-40835.json"}}],"schema_version":"1.9.0"}