# CVE-2014-3704 Drupal core 7.x before 7.32 SQL注入漏洞
==INFO==
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.
==EXP==
https://github.com/JustYoomoon/Exploit/blob/main/CVE-2014-3704.zip
© 版权声明
文章版权归作者所有，未经允许请勿转载。
THE END
