CVE-2012-2302

MEDIO 5.0CVE-2012-2302 · Published 25/07/2012 · updated 16/06/2026

In breve

CVE-2012-2302 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda sitedoc (nancy wichmann).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.7%, superiore al 76.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
sitedoc nancy_wichmann	`= 6.x-1.0= 6.x-1.1= 6.x-1.2= 6.x-1.3= 6.x-1.x`	No fix yet

Description

Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows remote attackers to obtain sensitive information via unspecified vectors.

References

drupal.org/node/1546224
drupal.org/node/1547686 · Vendor Advisory
drupalcode.org/project/sitedoc.git/commitdiff/521721c · Exploit
openwall.com/lists/oss-security/2012/05/03/1
openwall.com/lists/oss-security/2012/05/03/2
osvdb.org/81555

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free