VendorsSite Documentation Projectsite_documentationany version
Vulnerabilities

Site Documentation Project Site Documentation any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2008-2271
The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gain privileges of other users by leveraging the "access content" permission to list tables and obtain session IDs from the database.
Published 2008-05-16 · Modified
5.0EPSS 0.020
CVE-2015-4370
Cross-site scripting (XSS) vulnerability in the Site Documentation module before 6.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms.
Published 2015-06-15 · Modified
3.5EPSS 0.009