ajax_checklist Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ajax_checklist/ Sun, 26 Feb 2023 09:11:17 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png ajax_checklist Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ajax_checklist/ 32 32 CVE-2008-5998 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5998/ Sun, 26 Feb 2023 09:11:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5998/ Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow remote authenticated users, with “update ajax checklists” permissions, to execute arbitrary SQL commands via a save operation, related to the (1) nid, (2) qid, and (3) state parameters.

The post CVE-2008-5998 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow remote authenticated users, with “update ajax checklists” permissions, to execute arbitrary SQL commands via a save operation, related to the (1) nid, (2) qid, and (3) state parameters.

The post CVE-2008-5998 appeared first on CVE Vulnerability.

]]> CVE-2008-5999 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5999/ Sun, 26 Feb 2023 09:11:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5999/ Cross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allows remote authenticated users, with create and edit permissions for posts, to inject arbitrary web script or HTML via unspecified vectors involving the ajax_checklist filter.

The post CVE-2008-5999 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allows remote authenticated users, with create and edit permissions for posts, to inject arbitrary web script or HTML via unspecified vectors involving the ajax_checklist filter.

The post CVE-2008-5999 appeared first on CVE Vulnerability.

]]>