CVE-2008-4806

published 2008-10-31

CVE-2008-4806: Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField parameter to unspecified components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	lotus_connections	<= 2.0	—
ibm	lotus_connections	—	—

CWE-89