CVE-2014-3704_Drupal_core_7.x_before_7.32_SQL注入漏洞

2021年7月15日发布

040

# CVE-2014-3704 Drupal core 7.x before 7.32 SQL注入漏洞
==INFO==
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.

==EXP==
https://github.com/JustYoomoon/Exploit/blob/main/CVE-2014-3704.zip

文章版权归作者所有，未经允许请勿转载。

THE END