Total vulnerabilities in the database
Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked.
| Software | From | Fixed in |
|---|---|---|
| drupal / drupal | 6.0 | 6.16 |
| drupal / drupal | 5.0 | 5.22 |