Login Request a demo
Unscored severity · published May 3, 2011
CVE-2011-1522
Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote…
–
CVSS
2%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset field.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Doctrine · Doctrine-project
2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; +7 more · source: NVD
DO
Doctrine1.2.0 · Doctrine-project
All versions, or not specified · source: NVD
DO
Doctrine1.2.1 · Doctrine-project
All versions, or not specified · source: NVD
DO
Doctrine1.2.2 · Doctrine-project
All versions, or not specified · source: NVD
DO
Doctrine1.2.3 · Doctrine-project
All versions, or not specified · source: NVD
Affected product
DO
Doctrine
Doctrine-project
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1522
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1522
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622674
openwall.com
http://openwall.com/lists/oss-security/2011/03/25/2
openwall.com
http://openwall.com/lists/oss-security/2011/03/28/3
www.debian.org
http://www.debian.org/security/2011/dsa-2223
Patch
http://www.doctrine-project.org/blog/doctrine-security-fix
www.securityfocus.com
http://www.securityfocus.com/bid/47034