CVE-2008-2271: Site Documentation Project Site Documentation

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gain privileges of other users by leveraging the "access content" permission to list tables and obtain session IDs from the database.

Affected products

• Site Documentation Project Site Documentation: from 5.x-1.0, before 5.x-1.8 (fixed in 5.x-1.8); from 6.x-1.0, before 6.x-1.1 (fixed in 6.x-1.1)

Published 2008-05-16. Last modified 2026-06-16.