PT-2009-1473 · Drupal · Ajax Checklist

Published 2009-01-28 · Updated 2018-10-11 · CVE-2008-5998

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ajax Checklist module versions prior to 5.x-1.1 for Drupal

Description The issue allows remote authenticated users with "update ajax checklists" permissions to execute arbitrary SQL commands via a save operation. This is related to the nid, qid, and state parameters in the ajax checklist save function.

Recommendations For Ajax Checklist module versions prior to 5.x-1.1, update to version 5.x-1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ajax checklist save function or limiting the "update ajax checklists" permissions to minimize the risk of exploitation. Avoid using the nid, qid, and state parameters in the affected function until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-5998

Affected Products

Ajax Checklist

References · 7

• 🔥 https://exploit-db.com/exploits/32415 · Exploit
• 🔥 http://securityfocus.com/bid/31384 · Exploit
• http://secunia.com/advisories/32009 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5998 · Security Note
• http://drupal.org/node/312968 · Vendor Advisory
• http://securityfocus.com/archive/1/496727/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45410 · Note