VendorsDrupaleveryblogall versions
Vulnerabilities

Drupal Everyblog

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2008-6136
Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an administrator via unknown attack vectors.
Published 2009-02-14 · Modified
7.5EPSS 0.014
CVE-2008-6137
EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions via unknown vectors.
Published 2009-02-14 · Modified
7.5EPSS 0.014
CVE-2008-6134
SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published 2009-02-14 · Modified
7.5EPSS 0.011
CVE-2008-6135
Cross-site scripting (XSS) vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2009-02-14 · Modified
4.3EPSS 0.010