Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2011-1661

The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Drupal Nicholas Thompson
Products
Drupal Node Quick Find