CVE-2008-5122: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the res parameter...

Ektron CMS400.NET WorkArea/ContentRatingGraph.aspx res Parameter SQL Injection

The remote host is running CMS400.NET, a .NET content management solution. The version of CMS400.NET installed on the remote host fails to sanitize user-supplied input to the 'res' parameter of the 'WorkArea/ContentRatingGraph.aspx' script before using it in a database query. An unauthenticated...