CVE-2008-5122
Published Nov 18, 2008
Last updated 7 years ago
Overview
- Description
- SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the res parameter.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-89
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ektron:cms4000.net:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB62235C-211E-49C2-965F-DA084260E8E9",
"versionEndIncluding": "7.52"
},
{
"criteria": "cpe:2.3:a:ektron:cms4000.net:7.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35694365-F7E4-4FF0-A99E-87A7A8B08EB5"
},
{
"criteria": "cpe:2.3:a:ektron:cms4000.net:7.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4C5BF04-66FE-444F-8104-C76E68CC32AE"
},
{
"criteria": "cpe:2.3:a:ektron:cms4000.net:7.02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88831F1F-6734-4964-9C35-BC3C17A9386A"
},
{
"criteria": "cpe:2.3:a:ektron:cms4000.net:7.03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8139DE1-56AB-4C0A-8939-A5D997DCB9AB"
},
{
"criteria": "cpe:2.3:a:ektron:cms4000.net:7.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7F1BC7A-0F81-4847-9F55-26C42D45ACCF"
},
{
"criteria": "cpe:2.3:a:ektron:cms4000.net:7.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "562C8C2B-C5B4-45C6-8A94-3E60A7C755DC"
},
{
"criteria": "cpe:2.3:a:ektron:cms4000.net:7.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD9B496C-5071-47A4-A1B5-25EBBA3386D3"
}
],
"operator": "OR"
}
]
}
]