Total vulnerabilities in the database
Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event," allows remote attackers to hijack web sessions via unknown vectors.
| Software | From | Fixed in |
|---|---|---|
| drupal / drupal | 6.0 | 6.3 |
| drupal / drupal | 5.0 | 5.9 |
| fedoraproject / fedora | 9 | 9.x |
| fedoraproject / fedora | 8 | 8.x |