CVE Vulnerabilities

CVE-2011-1661

Published: Apr 10, 2011 | Modified: Aug 17, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature.

Affected Software

Name Vendor Start Version End Version
Node_quick_find Nicholas_thompson 6.x-1.1 (including) 6.x-1.1 (including)

References