CVE:CVE-2011-1522
CNNVD:CNNVD-201104-272
doctrine中存在信息泄露漏洞。远程攻击者可利用此漏洞执行任意SQL命令。
Doctrine 1.2.4之前的1.x版本和2.0.3之前的2.x版本中的Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery函数中存在多个SQL注入漏洞。远程攻击者可以借助（1）limit或（2）offset字段执行任意SQL命令。
solution:Upgrade doctrine-project doctrine1.2.0 to a higher version than *; Upgrade doctrine-project doctrine1.2.1 to a higher version than *; Upgrade doctrine-project doctrine1.2.2 to a higher version than *; Upgrade doctrine-project doctrine1.2.3 to a higher version than *; Upgrade doctrine-project doctrine to a higher version than 2.0.0,2.0.0:alpha1,2.0.0:alpha2,2.0.0:alpha3,2.0.0:alpha4,2.0.0:beta1,2.0.0:beta2,2.0.0:beta3,2.0.0:beta4,2.0.0:rc1,2.0.0:rc2,2.0.1,2.0.2,and avoid the version 2.0.0,2.0.0:alpha1,2.0.0:alpha2,2.0.0:alpha3,2.0.0:alpha4,2.0.0:beta1,2.0.0:beta2,2.0.0:beta3,2.0.0:beta4,2.0.0:rc1,2.0.0:rc2,2.0.1,2.0.2