Sploitus

CVE-2018-7600

50 known exploits for CVE-2018-7600

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

Affected products
Drupal, Ubuntu
Drupal
≤ 7.57, 8.3.9, 8.4.6, 8.5.1
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
100.0% (100th percentile)
Weakness
CWE-20
NVD status
Analyzed
Published
2018-03-29
CVE-2018-7600 at NVD
Authoritative description, scoring and affected products

50 known exploits for CVE-2018-7600

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for Improper Input Validation in Drupal
2026-06-10 nayem-mGITHUB
Exploit for Improper Input Validation in Drupal
2026-05-30 DungsocoolGITHUB
Exploit for OS Command Injection in Gnu Bash
2026-04-01 Phantom-C2-77GITHUB
Exploit for Improper Input Validation in Drupal
2026-02-10 bixiPROGITHUB
Exploit for Improper Input Validation in Drupal
2025-12-08 4l13n-DNGITHUB
Exploit for Improper Input Validation in Drupal
2025-09-21 nika0x38GITHUB
Exploit for Improper Input Validation in Drupal
2021-11-18 iceCreamGITEE
Exploit for Code Injection in Drupal
2021-07-24 希言GITEE
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 KitPloitKITPLOIT
Exploit for SQL Injection in Drupal
2020-10-06 enaGITEE
Exploit for Improper Input Validation in Drupal
2020-08-31 ludy-devGITHUB
Exploit for Improper Input Validation in Drupal
2020-04-12 rabbitmaskGITHUB
Exploit for Improper Input Validation in Drupal
2020-04-07 zhzykerGITHUB
Sn1per v7.0 - Automated Pentest Framework For Offensive Security Experts
2019-05-12 KitPloitKITPLOIT
Darksplitz - Exploit Framework
2019-04-04 KitPloitKITPLOIT
Sn1per v6.0 - Automated Pentest Framework For Offensive Security Experts
2018-11-24 KitPloitKITPLOIT
Exploit for Improper Input Validation in Drupal
2018-10-23 r3dxpl0itGITHUB
Sn1per v5.0 - Automated Pentest Recon Scanner
2018-07-05 KitPloitKITPLOIT
Drupal 8 SA-CORE-2018-002 RCE
2018-05-08 Dsquare SecurityD2
Drupal 7 SA-CORE-2018-002 RCE
2018-05-08 Dsquare SecurityD2
Drupal Drupalgeddon 2 Forms API Property Injection Exploit
2018-04-26 metasploitZDTRuby
Drupal Drupalgeddon 2 Forms API Property Injection
2018-04-26 FireFartPACKETSTORMRuby
Drupal Form API command execution
2018-04-25 SAINT CorporationSAINT
Drupal Form API command execution
2018-04-25 SAINT CorporationSAINT
Drupal Form API command execution
2018-04-25 SAINT CorporationSAINT
Drupal Drupalgeddon 2 Forms API Property Injection
2018-04-18 Jasper Mattsson, a2u, Nixawk, FireFart, wvu <wvu@metasploit.com>METASPLOITRuby
Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - Drupalgeddon2 Remote Code Execution Exploit
2018-04-18 Vitalii RudnykhZDTPython
Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 Drupalgeddon2 Remote Code Execution Exploit
2018-04-17 José Ignacio RojoZDTRuby
Drupal 8.3.9 8.4.6 8.5.1 - Drupalgeddon2 Remote Code Execution (Metasploit)
2018-04-17 José Ignacio RojoEXPLOITPACKRuby
Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (Metasploit)
2018-04-17 José Ignacio RojoEXPLOITDBRuby
Drupalgeddon2 Drupal Remote Code Execution
2018-04-17 Vitalii RudnykhPACKETSTORMRuby
Exploit for Improper Input Validation in Drupal
2018-04-17 pimpsGITHUB
Exploit for Improper Input Validation in Drupal
2018-04-16 FireFartGITHUB
Exploit for Improper Input Validation in Drupal
2018-04-15 sl4ckyGITHUB
Exploit for Improper Input Validation in Drupal
2018-04-15 sl4ckyGITHUB
Exploit for Improper Input Validation in Drupal
2018-04-14 dr-imanGITHUB
Exploit for Improper Input Validation in Drupal
2018-04-14 jirojo2GITHUB
Exploit for Improper Input Validation in Drupal
2018-04-14 dwisiswant0GITHUB
Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 Drupalgeddon2 Remote Code Execution Exploit
2018-04-13 Hans TopoZDTPHP
Drupal 8.3.9 8.4.6 8.5.1 - Drupalgeddon2 Remote Code Execution (PoC)
2018-04-13 Vitalii RudnykhEXPLOITPACKPython
Drupal 7.58 8.3.9 8.4.6 8.5.1 - Drupalgeddon2 Remote Code Execution
2018-04-13 Hans Topo g0tmi1kEXPLOITPACKRuby
Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC)
2018-04-13 Vitalii RudnykhEXPLOITDBPython
Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution
2018-04-13 Hans Topo & g0tmi1kEXPLOITDBRuby
Drupal Drupalgeddon2 Remote Code Execution
2018-04-13 Vitalii RudnykhPACKETSTORMPython
Drupal Drupalgeddon2 Remote Code Execution Ruby Port
2018-04-13 Hans TopoPACKETSTORMPHP
Exploit for Improper Input Validation in Drupal
2018-04-13 knqyf263GITHUB
Exploit for Improper Input Validation in Drupal
2018-04-12 dreadlockedGITHUB
Drupal core Remote Code Execution(CVE-2018-7600) (Drupalgeddon2)
2018-03-30 KnownsecSEEBUG
Exploit for Improper Input Validation in Drupal
2018-03-30 g0rxGITHUB
Exploit for Improper Input Validation in Drupal
2018-03-30 a2uGITHUB