CVE-2008-2271

The Site Documentation Drupal module vulnerability CVE-2008-2271 affects Drupal sites using the Site Documentation module 5.x (before 5.x-1.8) and 6.x (before 6.x-1.1). Remote authenticated users can abuse the module’s access content permission to enumerate database tables and obtain session IDs,...

CVE-2015-4370

CVE-2015-4370 is a XSS in the Drupal Site Documentation module (6.x-1.x) prior to 6.x-1.5. Root cause: insufficient sanitization of user-supplied text on certain pages, exploitable by remote authenticated users with permission to create/edit taxonomy terms. Impact: arbitrary script/HTML injection...