CVE-2008-4806: SQL Injection
Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField parameter to unspecified components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4806?
CVE-2008-4806 is considered a high severity vulnerability due to its potential for remote command execution through SQL injection.
How do I fix CVE-2008-4806?
To fix CVE-2008-4806, update IBM Lotus Connections to version 2.0.1 or later where the vulnerabilities are patched.
What software is affected by CVE-2008-4806?
CVE-2008-4806 affects IBM Lotus Connections versions 1.0.2 and earlier, as well as all versions prior to 2.0.1.
Can CVE-2008-4806 be exploited remotely?
Yes, CVE-2008-4806 can be exploited remotely by attackers who can send specially crafted SQL commands via the sortField parameter.
What are the impacts of exploiting CVE-2008-4806?
Exploitation of CVE-2008-4806 can lead to unauthorized access to the database, manipulation of data, and potential compromise of the entire system.