CVE-2008-4806

IBM Lotus Connections 2.x is affected by multiple SQL injection vulnerabilities in unspecified components, exploitable via the sortField parameter to allow remote execution of arbitrary SQL commands. Impact includes potential data exposure or modification with partial confidentiality/integrity/av...