Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The escaping of offset and length inputs to the generation of a LIMIT clause was not probably cast to an integer, allowing SQL injection to take place if application developers passed unescaped user input to the DBAL QueryBuilder or any other API that ultimately uses the AbstractPlatform::modifyLimitQuery API.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Doctrine Dbal SQL注入漏洞
Vulnerability Description
Doctrine Dbal是一个 Doctrine 数据库抽象层。 Doctrine DBAL 存在安全漏洞，该漏洞源于允许SQL注入发生如果应用程序开发人员通过保有的用户输入DBAL QueryBuilder或任何其他API,最终使用AbstractPlatform:: modifyLimitQuery API。
CVSS Information
N/A
Vulnerability Type
N/A