Everyblog (Drupal) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2009-02-14. Vendor: Drupal.

CVEs of Everyblog

• CVE-2008-6136 - CVSS 7.5 (high), 2009-02-14: Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an administrator via…
• CVE-2008-6135 - CVSS 4.3 (medium), 2009-02-14: Cross-site scripting (XSS) vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2008-6134 - CVSS 7.5 (high), 2009-02-14: SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
• CVE-2008-6137 - CVSS 7.5 (high), 2009-02-14: EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions via unknown vectors.