Everyblog

everyblog

Vendor: Drupal • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-6137 1Drupal 1Everyblog Apr 23, 2026 Feb 14, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions via unknown vectors.
CVE-2008-6136 1Drupal 1Everyblog Apr 23, 2026 Feb 14, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an administrator via unknown attack vectors.
CVE-2008-6135 1Drupal 1Everyblog Apr 23, 2026 Feb 14, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-6134 1Drupal 1Everyblog Apr 23, 2026 Feb 14, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.