Lotus SQL injection vulnerability

Lotus 0.10.2 and earlier versions contain an SQL injection vulnerability. This vulnerability arises because only keyword validation is performed on registered subscriptionfilterkeys. Attackers can exploit this value as an unquoted group-by identifier, injecting SQL code into usage aggregation...