Vulnerability Details CVE-2008-4806
Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField parameter to unspecified components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/32466
- http://www-01.ibm.com/support/docview.wss?uid=swg27014008
- http://www.securityfocus.com/bid/31989
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46212
- http://secunia.com/advisories/32466
- http://www-01.ibm.com/support/docview.wss?uid=swg27014008
- http://www.securityfocus.com/bid/31989
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46212
Products affected by CVE-2008-4806
-
cpe:2.3:a:ibm:lotus_connections:1.0.0.0
-
cpe:2.3:a:ibm:lotus_connections:1.0.1.0
-
cpe:2.3:a:ibm:lotus_connections:1.0.2
-
cpe:2.3:a:ibm:lotus_connections:1.0.2.0