mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-14 06:52:09 +02:00
0xMarcio
52 lines
2.4 KiB
Markdown
52 lines
2.4 KiB
Markdown
### [CVE-2018-7602](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7602)
|
|
|
|
|
|
|
|
|
|
### Description
|
|
|
|
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- https://www.exploit-db.com/exploits/44542/
|
|
- https://www.exploit-db.com/exploits/44557/
|
|
|
|
#### Github
|
|
- https://github.com/0xT11/CVE-POC
|
|
- https://github.com/132231g/CVE-2018-7602
|
|
- https://github.com/1337g/Drupalgedon3
|
|
- https://github.com/ARPSyndicate/cvemon
|
|
- https://github.com/ARPSyndicate/kenzer-templates
|
|
- https://github.com/Awrrays/FrameVul
|
|
- https://github.com/CLincat/vulcat
|
|
- https://github.com/HimmelAward/Goby_POC
|
|
- https://github.com/Ostorlab/KEV
|
|
- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
|
|
- https://github.com/Project-WARMIND/Exploit-Modules
|
|
- https://github.com/SexyBeast233/SecBooks
|
|
- https://github.com/Threekiii/Awesome-Exploit
|
|
- https://github.com/Threekiii/Awesome-POC
|
|
- https://github.com/Threekiii/Vulhub-Reproduce
|
|
- https://github.com/Z0fhack/Goby_POC
|
|
- https://github.com/bakery312/Vulhub-Reproduce
|
|
- https://github.com/cyberharsh/DrupalCVE-2018-7602
|
|
- https://github.com/happynote3966/CVE-2018-7602
|
|
- https://github.com/hectorgie/PoC-in-GitHub
|
|
- https://github.com/hktalent/bug-bounty
|
|
- https://github.com/kastellanos/CVE-2018-7602
|
|
- https://github.com/lethehoa/Racoon_template_guide
|
|
- https://github.com/lnick2023/nicenice
|
|
- https://github.com/oways/SA-CORE-2018-004
|
|
- https://github.com/pimps/CVE-2018-7600
|
|
- https://github.com/qazbnm456/awesome-cve-poc
|
|
- https://github.com/rithchard/Drupalgeddon3
|
|
- https://github.com/shellord/Drupalgeddon-Mass-Exploiter
|
|
- https://github.com/superfish9/pt
|
|
- https://github.com/t0m4too/t0m4to
|
|
- https://github.com/tomoyamachi/gocarts
|
|
- https://github.com/trganda/starrlist
|
|
- https://github.com/xbl3/awesome-cve-poc_qazbnm456
|
|
|