Skip to content
OpenAdvisories

Package · Ubuntu

php-doctrine-dbal

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    DBAL 3 SQL Injection Security Vulnerability

    Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The escaping of offset and length inputs to the generation of a LIMIT clause was not probably cast to an integer, allowing SQL injection to take place if application developers passed unescaped user input t…