Privilege escalation in Site Documentation Project
CVE-2008-2271
The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gain privileges of other users by leveraging the "access content" permission to list tables and obtain session IDs from the database.
Vulnerability class: Privilege Escalation
EPSS: 0.020 (78.8th percentile) — read the EPSS interpretation.
Affected products
- Site_documentation_project Site_documentation
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)