### [CVE-2018-7602](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7602)
![](https://img.shields.io/static/v1?label=Product&message=core&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Remote%20code%20Execution&color=brighgreen)

### Description

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

### POC

#### Reference
- https://www.exploit-db.com/exploits/44542/
- https://www.exploit-db.com/exploits/44557/

#### Github
- https://github.com/0xT11/CVE-POC
- https://github.com/132231g/CVE-2018-7602
- https://github.com/1337g/Drupalgedon3
- https://github.com/ARPSyndicate/cvemon
- https://github.com/ARPSyndicate/kenzer-templates
- https://github.com/Awrrays/FrameVul
- https://github.com/CLincat/vulcat
- https://github.com/HimmelAward/Goby_POC
- https://github.com/Ostorlab/KEV
- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
- https://github.com/Project-WARMIND/Exploit-Modules
- https://github.com/SexyBeast233/SecBooks
- https://github.com/Threekiii/Awesome-Exploit
- https://github.com/Threekiii/Awesome-POC
- https://github.com/Threekiii/Vulhub-Reproduce
- https://github.com/Z0fhack/Goby_POC
- https://github.com/bakery312/Vulhub-Reproduce
- https://github.com/cyberharsh/DrupalCVE-2018-7602
- https://github.com/happynote3966/CVE-2018-7602
- https://github.com/hectorgie/PoC-in-GitHub
- https://github.com/hktalent/bug-bounty
- https://github.com/kastellanos/CVE-2018-7602
- https://github.com/lethehoa/Racoon_template_guide
- https://github.com/lnick2023/nicenice
- https://github.com/oways/SA-CORE-2018-004
- https://github.com/pimps/CVE-2018-7600
- https://github.com/qazbnm456/awesome-cve-poc
- https://github.com/rithchard/Drupalgeddon3
- https://github.com/shellord/Drupalgeddon-Mass-Exploiter
- https://github.com/superfish9/pt
- https://github.com/t0m4too/t0m4to
- https://github.com/tomoyamachi/gocarts
- https://github.com/trganda/starrlist
- https://github.com/xbl3/awesome-cve-poc_qazbnm456