{"uuid": "bf200c4f-8bdb-420c-af05-7711571e85ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-7600", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/drupal_drupalgeddon2.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd, x86, x64\", \"author\": [\"Jasper Mattsson\", \"a2u\", \"Nixawk\", \"FireFart\", \"wvu \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a Drupal property injection in the Forms API.\\n\\n          Drupal 6.x, < 7.58, 8.2.x, < 8.3.9, < 8.4.6, and < 8.5.1 are vulnerable.\", \"disclosure_date\": \"2018-03-28\", \"fullname\": \"exploit/unix/webapp/drupal_drupalgeddon2\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Drupal Drupalgeddon 2 Forms API Property Injection\", \"needs_cleanup\": true, \"notes\": {\"AKA\": [\"SA-CORE-2018-002\", \"Drupalgeddon 2\"], \"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/unix/webapp/drupal_drupalgeddon2.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/drupal_drupalgeddon2\", \"references\": [\"CVE-2018-7600\", \"URL-https://www.drupal.org/sa-core-2018-002\", \"URL-https://greysec.net/showthread.php?tid=2912\", \"URL-https://research.checkpoint.com/uncovering-drupalgeddon-2/\", \"URL-https://github.com/a2u/CVE-2018-7600\", \"URL-https://github.com/nixawk/labs/issues/19\", \"URL-https://github.com/FireFart/CVE-2018-7600\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic (PHP In-Memory)\", \"Automatic (PHP Dropper)\", \"Automatic (Unix In-Memory)\", \"Automatic (Linux Dropper)\", \"Drupal 7.x (PHP In-Memory)\", \"Drupal 7.x (PHP Dropper)\", \"Drupal 7.x (Unix In-Memory)\", \"Drupal 7.x (Linux Dropper)\", \"Drupal 8.x (PHP In-Memory)\", \"Drupal 8.x (PHP Dropper)\", \"Drupal 8.x (Unix In-Memory)\", \"Drupal 8.x (Linux Dropper)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:41.681783Z"}