GCVE - cpe:2.3:a:codeigniter:codeigniter:1.5.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:codeigniter:codeigniter:1.5.3:*:*:*:*:*:*:*

part: a version: 1.5.3 update: *

Vendor	Codeigniter (`1ff1b062-2944-593a-af74-8d93b0813cd3`)
Product	Codeigniter (`9f437b05-71ee-5757-b08e-e0af95c35ed0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/codeigniter4/codeigniter4`	purl2cpe	2026-06-01 10:11:26.344516
`pkg:npm/codeigniter4`	purl2cpe	2026-06-01 10:11:26.344517

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-3709`	vulnerable	2026-06-08 04:49:54.702758	Details available CRLF injection vulnerability in the redirect function in url_helper.php in CodeIgniter 1.5.3 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in an unspecified parameter, as demonstrated by a Set-Cookie header. Published: 2007-07-11T23:00:00.000Z Updated: 2024-08-07T14:28:51.952Z Open on db.gcve.eu Reference links http://osvdb.org/39370 http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html http://www.securityfocus.com/archive/1/473190/100/0/threaded http://securityreason.com/securityalert/2877	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3708`	vulnerable	2026-06-08 04:49:54.702469	Details available Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote attackers to inject arbitrary web script or HTML via (1) String.fromCharCode and (2) malformed nested tag manipulations in an unspecified component, related to insufficient sanitization by the xss_clean function. Published: 2007-07-11T23:00:00.000Z Updated: 2024-08-07T14:28:52.188Z Open on db.gcve.eu Reference links http://osvdb.org/37907 http://secunia.com/advisories/25991 https://exchange.xforce.ibmcloud.com/vulnerabilities/35350 http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html http://www.securityfocus.com/archive/1/473190/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3707`	vulnerable	2026-06-08 04:49:54.702122	Details available Directory traversal vulnerability in index.php in CodeIgniter 1.5.3 before 20070628, when enable_query_strings is true, allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter. Published: 2007-07-11T23:00:00.000Z Updated: 2024-08-07T14:28:52.230Z Open on db.gcve.eu Reference links http://secunia.com/advisories/25991 https://exchange.xforce.ibmcloud.com/vulnerabilities/35348 http://osvdb.org/37906 http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html http://www.securityfocus.com/archive/1/473190/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3706`	vulnerable	2026-06-08 04:49:54.701704	Details available The _sanitize_globals function in CodeIgniter 1.5.3 before 20070628 allows remote attackers to unset arbitrary global variables with unspecified impact, as demonstrated by a _SERVER cookie. Published: 2007-07-11T23:00:00.000Z Updated: 2024-08-07T14:28:52.070Z Open on db.gcve.eu Reference links http://secunia.com/advisories/25991 http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html http://www.securityfocus.com/archive/1/473190/100/0/threaded http://osvdb.org/37905 http://securityreason.com/securityalert/2877	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.