Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Drupal | Drupal | 6.0 | 6.0 |
| Drupal | Drupal | 6.0 | 6.0 |
| Drupal | Drupal | 6.2 | 6.2 |
| Drupal | Drupal | 6.14 | 6.14 |
| Drupal | Drupal | 6.24 | 6.24 |
| Drupal | Drupal | 6.13 | 6.13 |
| Drupal | Drupal | 6.0 | 6.0 |
| Drupal | Drupal | 6.25 | 6.25 |
| Drupal | Drupal | 6.18 | 6.18 |
| Drupal | Drupal | 6.0 | 6.0 |
| Drupal | Drupal | 6.12 | 6.12 |
| Drupal | Drupal | 6.0 | 6.0 |
| Drupal | Drupal | 6.0 | 6.0 |
| Drupal | Drupal | 6.4 | 6.4 |
| Drupal | Drupal | 6.11 | 6.11 |
| Drupal | Drupal | 6.0 | 6.0 |
| Drupal | Drupal | 6.26 | 6.26 |
| Drupal | Drupal | 6.7 | 6.7 |
| Drupal | Drupal | 6.22 | 6.22 |
| Drupal | Drupal | 6.8 | 6.8 |
| Drupal | Drupal | 6.19 | 6.19 |
| Drupal | Drupal | 6.1 | 6.1 |
| Drupal | Drupal | 6.21 | 6.21 |
| Drupal | Drupal | 6.17 | 6.17 |
| Drupal | Drupal | 6.5 | 6.5 |
| Drupal | Drupal | 6.10 | 6.10 |
| Drupal | Drupal | 6.23 | 6.23 |
| Drupal | Drupal | 6.6 | 6.6 |
| Drupal | Drupal | 6.0 | 6.0 |
| Drupal | Drupal | 6.15 | 6.15 |
| Drupal | Drupal | 6.0 | 6.0 |
| Drupal | Drupal | 6.16 | 6.16 |
| Drupal | Drupal | 6.3 | 6.3 |
| Drupal | Drupal | 6.0 | 6.0 |
| Drupal | Drupal | 6.20 | 6.20 |
| Drupal | Drupal | 6.9 | 6.9 |