{"id":"GHSA-2pcj-76hj-xqhm","aliases":["CVE-2016-10131"],"title":"CodeIgniter arbitrary code execution","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"CRITICAL","description":"system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email->from field to insert sendmail command-line arguments.","severity":"critical","score":9.8,"published":"2022-05-17T02:55:21.000Z","modified":"2026-09-10T03:49:18.807Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"bcit-ci/codeigniter","sources":[{"name":"OSV · GHSA-2pcj-76hj-xqhm","url":"https://osv.dev/vulnerability/GHSA-2pcj-76hj-xqhm"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.3"}],"type":"ECOSYSTEM"}],"versions":["3.0.0","3.0.1","3.0.1rc","3.0.1rc2","3.0.2","3.0.3","3.0.4","3.0.5","3.0.6","3.0rc","3.0rc2","3.0rc3","3.1.0","3.1.1","3.1.2"],"fixed":["3.1.3"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2016-10131","https://github.com/bcit-ci/CodeIgniter/issues/4844","https://github.com/bcit-ci/CodeIgniter/issues/4963","https://github.com/bcit-ci/CodeIgniter/commit/8db01f13809a92bac7bc95b02893175d7654d627","https://github.com/codeigniter4/framework","https://www.codeigniter.com/userguide3/changelog.html#bug-fixes-for-3-1-3","http://www.securityfocus.com/bid/96851"],"sources":[{"name":"OSV","id":"GHSA-2pcj-76hj-xqhm","modified":"2026-09-10T03:49:18.807741446Z","url":"https://osv.dev/vulnerability/GHSA-2pcj-76hj-xqhm"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T21:15:31.530Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}