CVE-2019-6340 PoC — Drupal 输入验证错误漏洞

Description

(CVE-2019-6340, CVE-2018-7600) drupal8-REST-RCE 

介绍

# drupal8-REST-RCE
CVE-2019-6340 drupal8-REST-RCE (/node/1) , CVE-2018-7600 drupal8 RCE (/user/register)

Unix/Linux command - remote code Execution (command "id")

Usage>

    python drupal8-REST-RCE.py <dst_ip> <dst_port> (user defined port)
    
    python drupal8-REST-RCE.py <dst_ip> (default : 80/tcp)
  
[updated!]  
Script editted for supporting python3 (2020.11.07)

Just using Vuln Test for your System

文件快照

备注