CVE-2008-5122: Ektron CMS4000.NET

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the res parameter.

Affected products

• Ektron CMS4000.NET: up to and including 7.52; version 7.00 only; version 7.01 only; version 7.02 only; version 7.03 only; version 7.04 only; …

Published 2008-11-18. Last modified 2026-06-16.