CVE-2011-1661

Name: CVE-2011-1661
Creator: NVD / NIST
Published: 2011-04-10T02:51:19.65+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.47%

Last modified Jun 16, 2026

CVE-2011-1661 is a vulnerability of currently unknown severity. The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature.. EPSS estimates a 1.47% chance of exploitation in the next 30 days.

Description

The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature.

Metrics

EPSS Probability

1.47%

70.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-264

Affected Software

Vendor	Product	Versions
Nicholas Thompson	Node Quick Find	6.x-1.1

References

http://drupal.org/files/issues/db_rewrite_sql_12.patchPatch
http://drupal.org/node/1080114Patch
http://drupal.org/node/1118408Patch, Vendor Advisory
http://secunia.com/advisories/44046Vendor Advisory
http://www.securityfocus.com/bid/47238
https://exchange.xforce.ibmcloud.com/vulnerabilities/66604
http://drupal.org/files/issues/db_rewrite_sql_12.patchPatch
http://drupal.org/node/1080114Patch
http://drupal.org/node/1118408Patch, Vendor Advisory
http://secunia.com/advisories/44046Vendor Advisory
http://www.securityfocus.com/bid/47238
https://exchange.xforce.ibmcloud.com/vulnerabilities/66604

Timeline

Published: Apr 10, 2011
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2011-1661?

How severe is CVE-2011-1661?

Severity scoring for CVE-2011-1661 is pending analysis. The EPSS model estimates a 1.47% probability of exploitation in the next 30 days.

How do I fix CVE-2011-1661?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2011-1661?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST