本ページは drupal everyblog に影響する公開済み CVE(NVD の CPE 経由で関連付け)を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS(%) | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2008-6137 | EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions via unknown vectors. | [email protected] | 7.5 | 1.35% | 2009-02-14 | 2026-06-16 |
| CVE-2008-6136 | Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an administrator via unknown attack vectors. | [email protected] | 7.5 | 1.36% | 2009-02-14 | 2026-06-16 |
| CVE-2008-6135 | Cross-site scripting (XSS) vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | [email protected] | 4.3 | 1.03% | 2009-02-14 | 2026-06-16 |
| CVE-2008-6134 | SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | [email protected] | 7.5 | 1.06% | 2009-02-14 | 2026-06-16 |