CVE-2011-1661

Name of the Vulnerable Software and Affected Versions Node Quick Find module version 6.x-1.1

Description The issue allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature, due to the module not using db rewrite sql when presenting node titles.

Recommendations For Node Quick Find module version 6.x-1.1, consider disabling the autocomplete feature until a patch is available to prevent the bypassing of access restrictions.