
Python exploit for CVE-2018-7600 enabling unauthenticated remote code execution on Drupal 7.x versions below 7.58.
CVE-2018-7600 - Drupal 7.x RCE
Drupal < 7.58 unauthenticated RCE
Requirements
Usage
Just install requests (pip install requests), edit the file to change the host and run the exploit:
python .\poc.py
uid=33(www-data) gid=33(www-data) groups=33(www-data)
[{"command":"settings",......