Sploitus

Exploit for Immunity Canvas: DRUPAL_NAME_SQLI

canvas · 2014-10-15

Exploit Code

MARKDOWN16 lines
## https://sploitus.com/exploit?id=DRUPAL_NAME_SQLI
**Name**|  drupal_name_sqli  
---|---  
**CVE**|  CVE-2014-3704  
**Exploit Pack**|  [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)  
**Description**| Drupal injection exploit  
**Notes**| CVE Name: CVE-2014-3704  
VENDOR: drupal.org  
Notes:   
  
This exploit replaces the password of 'Drupal User' with 'Drupal Password'.  
If uid is specified, 'Drupal User' is ignored.  
  
Repeatability: Infinite  
References: ['https://www.drupal.org/SA-CORE-2014-005']  
CVE Url: https://vulners.com/cve/CVE-2014-3704