Lucene search

[email protected]CVE-2011-1522

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-1522

2022-10-0316:15:10

CWE-89

[email protected]

web.nvd.nist.gov

cve-2011-1522

doctrine

dbal

platform

sql injection

nvd

vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.5 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.3%

JSON

Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset field.

Affected configurations

NVD

Node

doctrine-projectdoctrine1.2.0

doctrine-projectdoctrine1.2.1

doctrine-projectdoctrine1.2.2

doctrine-projectdoctrine1.2.3

Node

doctrine-projectdoctrineMatch2.0.0

doctrine-projectdoctrineMatch2.0.0alpha1

doctrine-projectdoctrineMatch2.0.0alpha2

doctrine-projectdoctrineMatch2.0.0alpha3

doctrine-projectdoctrineMatch2.0.0alpha4

doctrine-projectdoctrineMatch2.0.0beta1

doctrine-projectdoctrineMatch2.0.0beta2

doctrine-projectdoctrineMatch2.0.0beta3

doctrine-projectdoctrineMatch2.0.0beta4

doctrine-projectdoctrineMatch2.0.0rc1

doctrine-projectdoctrineMatch2.0.0rc2

doctrine-projectdoctrineMatch2.0.1

doctrine-projectdoctrineMatch2.0.2

CPENameOperatorVersion
doctrine-project:doctrine1.2.0doctrine-project doctrine1.2.0eq*
doctrine-project:doctrine1.2.1doctrine-project doctrine1.2.1eq*
doctrine-project:doctrine1.2.2doctrine-project doctrine1.2.2eq*
doctrine-project:doctrine1.2.3doctrine-project doctrine1.2.3eq*

CPE	Name	Operator	Version
doctrine-project:doctrine1.2.0	doctrine-project doctrine1.2.0	eq	*
doctrine-project:doctrine1.2.1	doctrine-project doctrine1.2.1	eq	*
doctrine-project:doctrine1.2.2	doctrine-project doctrine1.2.2	eq	*
doctrine-project:doctrine1.2.3	doctrine-project doctrine1.2.3	eq	*