Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack

🗓️ 26 Apr 2018 12:32:00Reported by The Hacker NewsType

Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack. Newly discovered remote code execution flaw in Drupal 7 and 8 core (CVE-2018-7602) allows hackers to take over affected websites similar to previous Drupalgeddon2 (CVE-2018-7600) exploit. Attackers actively hijack websites to spread malware

Reporter	Title	Published	Views	Family All 301
IBM Security Bulletins	Security Bulletin: API Connect Developer Portal is affected by Drupal vulnerability (CVE-2018-7600)	15 Jun 201807:09	–	ibm
IBM Security Bulletins	Security Bulletin: API Connect Developer Portal is affected by a Drupal vulnerability (CVE-2018-7602)	15 Jun 201807:09	–	ibm
GithubExploit	Exploit for Improper Input Validation in Drupal	31 Aug 202022:55	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	30 Mar 201808:52	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	8 Dec 202503:31	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	30 May 202610:03	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	14 Apr 201818:26	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	30 Mar 201814:23	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	12 Apr 201822:53	–	githubexploit
GithubExploit	CVE-Web-Framework	13 Aug 202611:38	–	githubexploit

26 Apr 2018 12:32Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.8

EPSS0.99991