Design/Logic Flaw

Site Documentation Sitedoc module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2012-2302

Site Documentation Sitedoc module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2012-2302

CVE-2012-2302 affects the Drupal contributed module Site Documentation (Sitedoc) for 6.x-1.x prior to 6.x-1.4. The issue is that the module does not properly verify the save location when archiving, allowing remote attackers to obtain sensitive information via unspecified vectors. The vulnerabili...