CVE-2011-1661
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-1661
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Nicholas Thompson Node Quick Find模块权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
基于Drupal的Node Quick Find模块6.x-1.1版本在提供节点主题时，没有使用db_rewrite_sql。远程攻击者可以借助自动完成功能绕过预设的访问限制并读取潜在敏感节点主题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-1661
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-1661
Please Login to view more intelligence information
- Access to this page has been denied.x_refsource_CONFIRM
- http://drupal.org/files/issues/db_rewrite_sql_12.patchx_refsource_MISC
- http://drupal.org/node/1118408x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2011-1661
Same Patch Batch · n/a · 2011-04-10 · 30 CVEs total
| CVE-2011-0462 | Novell openSUSE Build Service webui组件登录页面多个跨站脚本攻击漏洞 | |
| CVE-2011-1671 | Getontracks Tracks 'todos/tag/'跨站脚本攻击漏洞 | |
| CVE-2011-1670 | A.Kulikov InTerra Blog Machine actions/add.php跨站脚本攻击漏洞 | |
| CVE-2011-1669 | Mikoviny WP Custom Pages模块'url'目录遍历漏洞 | |
| CVE-2011-1668 | AWCM CMS AR Web Content Manager search.php跨站脚本攻击漏洞 | |
| CVE-2011-1667 | Xmedien Anzeigenmarkt 2011'q' SQL注入漏洞 | |
| CVE-2011-1666 | Metaways Tine敏感信息泄露漏洞 | |
| CVE-2011-1665 | PHPBoost备份泄露漏洞 | |
| CVE-2011-1664 | Icanlocalize Translation Management模块跨站请求伪造漏洞 | |
| CVE-2011-1663 | Icanlocalize Translation Management模块SQL注入漏洞 | |
| CVE-2011-1662 | Icanlocalize Translation Management模块跨站脚本攻击漏洞 | |
| CVE-2011-1660 | GrapeCity Data Dynamics Reports多个跨站脚本攻击漏洞 | |
| CVE-2011-1163 | Linux Kernel fs/partitions/osf.c osf_partition函数敏感信息泄露漏洞 | |
| CVE-2011-0466 | Novell openSUSE Build Service API写访问限制绕过漏洞 | |
| CVE-2011-0463 | Linux Kernel OCFS2子系统ocfs2_prepare_page_for_write函数敏感信息泄露漏洞 | |
| CVE-2011-0765 | pWhois Layer Four Traceroute lft本地权限提升漏洞 | |
| CVE-2011-1681 | VMware Open Virtual Machine Tools文件破坏漏洞 | |
| CVE-2011-1680 | ncpfs ncpmount配置错误漏洞 | |
| CVE-2011-1679 | ncpfs /etc/mtab文件破坏漏洞 | |
| CVE-2011-1678 | Samba smbfs /etc/mtab文件破坏漏洞 |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2011-1661
No comments yet