CVE-2018-7600 - Drupal 7.x RCE
Drupal < 7.58 unauthenticated RCE
Requirements
- python3
- python requests (pip install requests)
Usage
- Install dependencies
- modify the HOST variable in the script
- run the code
- win
Just install requests (pip install requests), edit the file to change the host and run the exploit:
python .\poc.py
uid=33(www-data) gid=33(www-data) groups=33(www-data)
[{"command":"settings",......