Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5998. PoCs published by Justin C. Klein Keane.
AI-analyzed exploit summary This exploit demonstrates SQL injection in the Ajax Checklist module for Drupal by injecting a malicious query to retrieve the admin password. The vulnerability arises from insufficient input sanitization in the module's SQL queries.
Description
Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow remote authenticated users, with "update ajax checklists" permissions, to execute arbitrary SQL commands via a save operation, related to the (1) nid, (2) qid, and (3) state parameters.
Exploits (1)
This exploit demonstrates SQL injection in the Ajax Checklist module for Drupal by injecting a malicious query to retrieve the admin password. The vulnerability arises from insufficient input sanitization in the module's SQL queries.