Approved changes feed: RSS · Atom

cpe:2.3:a:codeigniter:codeigniter:1.7.2:*:*:*:*:*:*:*

part: a version: 1.7.2 update: *

VendorCodeigniter (1ff1b062-2944-593a-af74-8d93b0813cd3)
ProductCodeigniter (9f437b05-71ee-5757-b08e-e0af95c35ed0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/codeigniter4/codeigniter4 purl2cpe 2026-06-01 10:11:26.344537
pkg:npm/codeigniter4 purl2cpe 2026-06-01 10:11:26.344538

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3719 vulnerable 2026-06-08 04:59:27.746792 Details available
CodeIgniter 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
Published: 2011-09-23T23:00:00.000Z
Updated: 2024-09-17T02:01:19.328Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.