EUVD-2008-6104

Malware in sbrugna...

EUVD-2008-6106

Malware in sbrugna...

EUVD-2008-6105

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an administrator via unknown attack vectors...

Authentication flaw

EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions via unknown vectors...

Sql injection

SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6137

EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions via unknown vectors...

CVE-2008-6135

Cross-site scripting XSS vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6134

SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6136

Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an administrator via unknown attack vectors...

CVE-2008-6134

CVE-2008-6134 describes an SQL injection vulnerability in the EveryBlog Drupal module (versions 5.x and 6.x). The flaw allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with a CVSS v2 base score of 7.5 (HIGH) and network attack vector, low attack complexity, no au...

CVE-2008-6137

EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions via unknown vectors...

CVE-2008-6136

Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an administrator via unknown attack vectors...

CVE-2008-6135

CVE-2008-6135 is an XSS vulnerability in the EveryBlog module (Drupal) for versions 5.x and 6.x. The affected component is the EveryBlog module; the root cause is an input handling/output sanitization flaw that permits remote attackers to inject arbitrary web script or HTML. The provided document...

CVE-2008-6134

SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6136

Technical details about CVE-2008-6136 are not publicly provided in the supplied documents. Monitor for updates from official advisories; current sources describe an unspecified Drupal module vulnerability without concrete affected versions, vectors, or fixes.

CVE-2008-6135

Cross-site scripting XSS vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6137

CVE-2008-6137 affects Drupal via the EveryBlog module (versions 5.x and 6.x). The vulnerability allows remote attackers to bypass access restrictions. The connected documents confirm the affected component but do not provide explicit root cause analysis, exploit details, affected configurations, ...

CVE-2008-6136: Undefined Security Weakness

Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an administrator via unknown attack vectors...