Vulnerabilities in CodeIgniter software