CVE-2008-5998

CVE-2008-5998 describes multiple SQL injection vulnerabilities in the Ajax Checklist module for Drupal (5.x before 5.x-1.1). The flaws allow remote authenticated users, with the update ajax checklists permission, to execute arbitrary SQL commands via a save operation, with the vulnerability tied ...