high7.5Public exploit code
CVE-2014-3704
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remot…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Remote Code Execution)2014-11-03 · webapps · php · Verified
- Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (PoC) (Reset Password) (2)2014-10-17 · webapps · php · Verified
- Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Add Admin User)2014-10-17 · webapps · php · Verified
- Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (PoC) (Reset Password) (1)2014-10-16 · webapps · php · Verified
- Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session)2014-11-03 · webapps · php
Impact
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | from 7.0 before 7.32 |
| Debian | Debian Linux | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/show/osvdb/113371
- http://packetstormsecurity.com/files/128720/Drupal-7.X-SQL-Injection.html
- http://packetstormsecurity.com/files/128721/Drupal-7.31-SQL-Injection.html
- http://packetstormsecurity.com/files/128741/Drupal-HTTP-Parameter-Key-Value-SQL-Injection.html
- http://seclists.org/fulldisclosure/2014/Oct/75
- http://secunia.com/advisories/59972
- http://www.debian.org/security/2014/dsa-3051
- http://www.exploit-db.com/exploits/34984
- http://www.exploit-db.com/exploits/34992
- http://www.exploit-db.com/exploits/34993
- http://www.exploit-db.com/exploits/35150
- http://www.openwall.com/lists/oss-security/2014/10/15/23
- http://www.securityfocus.com/archive/1/533706/100/0/threaded
- http://www.securityfocus.com/bid/70595
- https://www.drupal.org/SA-CORE-2014-005
- https://www.sektioneins.de/en/advisories/advisory-012014-drupal-pre-auth-sql-injection-vulnerability.html
- https://www.sektioneins.de/en/blog/14-11-03-drupal-sql-injection-vulnerability-PoC.html
- http://osvdb.org/show/osvdb/113371
- http://packetstormsecurity.com/files/128720/Drupal-7.X-SQL-Injection.html
- http://packetstormsecurity.com/files/128721/Drupal-7.31-SQL-Injection.html
- http://packetstormsecurity.com/files/128741/Drupal-HTTP-Parameter-Key-Value-SQL-Injection.html
- http://seclists.org/fulldisclosure/2014/Oct/75
- http://secunia.com/advisories/59972
- http://www.debian.org/security/2014/dsa-3051
- http://www.exploit-db.com/exploits/34984