CVE-2008-4806

Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField parameter to unspecified components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg27014008
http://www.securityfocus.com/bid/31989
http://secunia.com/advisories/32466	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46212

Configuration 1

cpe:2.3:a:ibm:lotus_connections:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_connections:1.0.2:*:*:*:*:*:*:*

---

Published : 2008-10-31 06:09

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-4806

Mitre link : CVE-2008-4806

No products.

CWE-89