CVE-2018-7602 PoC — Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

Source

Associated Vulnerability

Title:Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 (CVE-2018-7602)
Description:A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

Description

POC to test/exploit drupal vulnerability SA-CORE-2018-004 / CVE-2018-7602

Readme

# POC for Drupal exploit SA-CORE-2018-004 / CVE-2018-7602

## Author

Alexandre Nguyen

## Usage

    usage: exploit.py [-h] --command --node_id --url
    
    POC for Drupal vulnerability SA-CORE-2018-004
    
    arguments:
      -h, --help  show this help message and exit
      --command   Command to inject
      --node_id   Node to target
      --url       Drupal base URL
      
## License

GNU GPL

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!