CVE-2008-5122

SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the res parameter.

Link	Resource
http://www.digitrustgroup.com/advisories/web-application-security-ektron.html
http://www.securityfocus.com/bid/29857	Exploit
http://secunia.com/advisories/30824	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43268

Configuration 1

cpe:2.3:a:ektron:cms4000.net:7.00:*:*:*:*:*:*:* cpe:2.3:a:ektron:cms4000.net:7.01:*:*:*:*:*:*:* cpe:2.3:a:ektron:cms4000.net:7.03:*:*:*:*:*:*:* cpe:2.3:a:ektron:cms4000.net:7.02:*:*:*:*:*:*:* cpe:2.3:a:ektron:cms4000.net:*:*:*:*:*:*:*:* cpe:2.3:a:ektron:cms4000.net:7.51:*:*:*:*:*:*:* cpe:2.3:a:ektron:cms4000.net:7.50:*:*:*:*:*:*:* cpe:2.3:a:ektron:cms4000.net:7.04:*:*:*:*:*:*:*

---

Published : 2008-11-18 12:30

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5122

Mitre link : CVE-2008-5122

No products.

CWE-89