SQL Injection Vulnerability in CodeIgniter Active Record Class' Offset Method

SQL Injection Vulnerability in CodeIgniter Active Record Class' Offset Method

CVE-2015-5725 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute arbitrary SQL commands via vectors involving the offset variable.

Learn more about our Web Application Penetration Testing UK.