Description
The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended login access rules and successfully login via unknown vectors.
Remediation
References
Related Vulnerabilities
Drupal Improper Input Validation Vulnerability (CVE-2014-5019)
Drupal Core 9.0.x Remote Code Execution (9.0.0 - 9.0.7)
Craft CMS Files or Directories Accessible to External Parties Vulnerability (CVE-2024-52292)
Apache HTTP Server Session Fixation Vulnerability (CVE-2001-1534)
WordPress Plugin Payment Form for PayPal Pro SQL Injection (1.1.64)