Drupal 7 SQL Injection Vulnerability
sektioneins.de
Drupal 7 SQL Injection Vulnerability
1–10 of 83 posts
Re: Drupal 7 SQL Injection Vulnerability
#2This vulnerability is rated highly critical, it works for anonymous users and can lead to SQL injection and remote code execution.
There are currently around 930,000 Drupal 7 installations (https://www.drupal.org/project/usage/drupal), I fear that this will lead to a lot of compromised sites.
Re: Drupal 7 SQL Injection Vulnerability
#3Didn't get much attention when I posted it last night: https://news.ycombinator.com/item?id=8459192
Re: Drupal 7 SQL Injection Vulnerability
#4Didn't get much attention when I posted it last night: https://news.ycombinator.com/item?id=8459192
it's all about timing.
Re: Drupal 7 SQL Injection Vulnerability
#5Yep, and you can exploit any Drupal 7.31 or below and get full admin access.
Re: Drupal 7 SQL Injection Vulnerability
#6A PoC can be found here: http://pastebin.com/nDwLFV3v
Re: Drupal 7 SQL Injection Vulnerability
#7A PoC can be found here: http://pastebin.com/nDwLFV3v
Should remove block, make sure url is /user
This wouldn't work for me.
Re: Drupal 7 SQL Injection Vulnerability
#8how bad is this?
Re: Drupal 7 SQL Injection Vulnerability
#9If you are a paying CloudFlare customer using Drupal please make sure you have the WAF ruleset for Drupal enabled (https://blog.cloudflare.com/automatic-protection-for-common-...) as we rolled out automatic protection against this when it was announced.
Re: Drupal 7 SQL Injection Vulnerability
#10how bad is this?
It appears to be a pretty serious issue. The SQL injection alone is bad but the ability to run basically any PHP code through callbacks makes the problem that much worse.