CVE-2011-1661

The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access…

published April 10, 2011

CVSS
—
EPSS
1%
Percentile
73.4
In the wild
Unconfirmed
What it is

The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01470 · 73.4th percentile
Published
2011-04-10T01:00Z
EPSS history
Timeline
  • 10 APR 01:00Z
    The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access…
    cvelistv5