Drupal Ajax Checklist vulnerabilities
2 known vulnerabilities affecting drupal/ajax_checklist.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1LOW1
Vulnerabilities
Page 1 of 1
CVE-2008-5998P4MEDIUMCVSS 6.0PoCv5.x-1.02009-01-28
CVE-2008-5998 [MEDIUM] CWE-89 CVE-2008-5998: Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist mod
Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow remote authenticated users, with "update ajax checklists" permissions, to execute arbitrary SQL commands via a save operation, related to the (1) nid, (2) qid, and (3) state parameters.
nvd
CVE-2008-5999P4LOWCVSS 3.5v5.x-1.02009-01-28
CVE-2008-5999 [LOW] CWE-79 CVE-2008-5999: Cross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal
Cross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allows remote authenticated users, with create and edit permissions for posts, to inject arbitrary web script or HTML via unspecified vectors involving the ajax_checklist filter.
nvd