CVE-2011-1522

CVE-2011-1522 describes multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function, affecting Doctrine 1.x before 1.2.4 and 2.x before 2.0.3. Remote attackers can exploit these flaws by manipulating the 'limit' or 'offset' fields to execute arbitrary SQL commands. With a CVSS score of 7.5, this vulnerability is considered high severity, allowing unauthenticated attackers to achieve partial confidentiality, integrity, and availability impacts with low attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.