PT-2015-6552

Name of the Vulnerable Software and Affected Versions Drupal Site Documentation module versions prior to 6.x-1.5 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with specific permissions to inject arbitrary web script or HTML through vectors related to...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Site Documentation Module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple cross-site scripting vulnerabilities exist in the Drupal Site Documentation module. Because the application fails to properly filter user-supplied input, an attacker could exploit the vulnerabilities ...

PT-2012-3935

Name of the Vulnerable Software and Affected Versions Drupal Site Documentation Sitedoc module versions 6.x-1.x before 6.x-1.4 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors due to improper checking of the save location when archiving...