CVEs-PoC/2018/CVE-2018-7602.md

CVE-2018-7602

Description

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

POC

Reference

• https://www.exploit-db.com/exploits/44542/
• https://www.exploit-db.com/exploits/44557/

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/132231g/CVE-2018-7602
• https://github.com/1337g/Drupalgedon3
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Awrrays/FrameVul
• https://github.com/CLincat/vulcat
• https://github.com/HimmelAward/Goby_POC
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/Project-WARMIND/Exploit-Modules
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Threekiii/Awesome-Exploit
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/Z0fhack/Goby_POC
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/cyberharsh/DrupalCVE-2018-7602
• https://github.com/happynote3966/CVE-2018-7602
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/hktalent/bug-bounty
• https://github.com/kastellanos/CVE-2018-7602
• https://github.com/lethehoa/Racoon_template_guide
• https://github.com/lnick2023/nicenice
• https://github.com/oways/SA-CORE-2018-004
• https://github.com/pimps/CVE-2018-7600
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/rithchard/Drupalgeddon3
• https://github.com/shellord/Drupalgeddon-Mass-Exploiter
• https://github.com/superfish9/pt
• https://github.com/t0m4too/t0m4to
• https://github.com/tomoyamachi/gocarts
• https://github.com/trganda/starrlist
• https://github.com/xbl3/awesome-cve-poc_qazbnm456