Security Advisory

CVE-2011-1522

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-05-03 20:00:00
Last updated 2024-09-17 04:08:51
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset field.