php-doctrine-Doctrine: SQL injection
| Package(s): | php-doctrine-Doctrine |
CVE #(s): | CVE-2011-1522
|
| Created: | April 4, 2011 |
Updated: | April 21, 2011 |
| Description: |
From the Doctrine advisory:
The security hole was found and affects the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery() function which does not cast input values for limit and offset to integer and allows malicious SQL to be executed if these parameters are passed into Doctrine 2 directly from request variables without previous cast to integer. Functionality building on top using limit queries in the ORM such as Doctrine\ORM\Query::setFirstResult() and Doctrine\ORM\Query::setMaxResults() are also affected by this security hole. |
| Alerts: |
|
