Codeigniter: >> Codeigniter >> 1.4.0 Security Vulnerabilities
CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when the Mcrypt extension for PHP is not available.
CVSS Score
9.8
EPSS Score
0.312
Published
2017-09-19
system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email->from field to insert sendmail command-line arguments.
CVSS Score
9.8
EPSS Score
0.033
Published
2017-01-12
Page 2