CVE-2014-3704
82Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 100%
de la publicación al arma0 días
Publicada en NVD16 oct
1ª PoC16 oct
metasploit15 oct
VulnCheck+2370d
probabilidad de explotación
100%top 1% de las CVE
explotación observada
síVulnCheck
20 exploit(s) público(s)
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.
Productos afectados
n/a · n/aPoCs públicas encontradas — 20✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34993exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/35150exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34992exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34984exploitdbwww.exploit-db.com/exploits/44355no verificadogithubgithub.com/Neldeborg/Drupalgeddon-Python3★ 3githubgithub.com/happynote3966/CVE-2014-3704★ 1githubgithub.com/fbm31/Audit-BlackBox-Web-to-Root★ 0githubgithub.com/AleDiBen/Drupalgeddon★ 0githubgithub.com/joaomorenorf/CVE-2014-3704★ 0vulncheckvulncheck.com/xdb/649e22788447no verificadocve_referencepacketstormsecurity.com/files/128721/Drupal-7.31-SQL-Injection.htmlno verificadocve_referencepacketstormsecurity.com/files/128741/Drupal-HTTP-Parameter-Key-Value-SQL-Injection.htmlno verificadocve_referencewww.exploit-db.com/exploits/34984no verificadocve_referencewww.exploit-db.com/exploits/34992no verificadocve_referencewww.exploit-db.com/exploits/34993no verificadocve_referencewww.exploit-db.com/exploits/35150no verificadovulncheckvulncheck.com/xdb/497be7626f8cno verificadovulncheckvulncheck.com/xdb/fdd786971c1eno verificadocve_referencepacketstormsecurity.com/files/128720/Drupal-7.X-SQL-Injection.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://osvdb.org/show/osvdb/113371http://packetstormsecurity.com/files/128720/Drupal-7.X-SQL-Injection.htmlhttp://packetstormsecurity.com/files/128721/Drupal-7.31-SQL-Injection.htmlhttp://packetstormsecurity.com/files/128741/Drupal-HTTP-Parameter-Key-Value-SQL-Injection.htmlhttp://seclists.org/fulldisclosure/2014/Oct/75http://secunia.com/advisories/59972https://www.drupal.org/SA-CORE-2014-005https://www.sektioneins.de/en/advisories/advisory-012014-drupal-pre-auth-sql-injection-vulnerability.htmlhttps://www.sektioneins.de/en/blog/14-11-03-drupal-sql-injection-vulnerability-PoC.htmlhttp://www.debian.org/security/2014/dsa-3051http://www.exploit-db.com/exploits/34984http://www.exploit-db.com/exploits/34992